google-gemini/gemini-cli Release v0.59.0

News·Incident

MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

Independent researcher Syed Anas Mohiuddin developed proof-of-concept attacks that exploit trust gaps in MCP (Model Context Protocol), the standard many AI apps and agents use to communicate inside internal networks. A special form of prompt injection targets a specific agent—such as one for translation or data analysis—rather than the LLM, and lax guardrails let it forward harmful instructions to downstream agents that explicitly trust the first one. In the past five months, Google and four other organizations have acknowledged such vulnerabilities, which can enable exfiltration of database contents and sensitive business and personal information.

Independent researcher Syed Anas Mohiuddin developed proof-of-concept attacks that exploit trust gaps in MCP (Model Context Protocol), the standard many AI apps and agents use to communicate inside internal networks. A special form of prompt injection targets a specific agent—such as one for translation or data analysis—rather than the LLM, and lax guardrails let it forward harmful instructions to downstream agents that explicitly trust the first one. In the past five months, Google and four other organizations have acknowledged such vulnerabilities, which can enable exfiltration of database contents and sensitive business and personal information.

Google released gemini-cli v0.55.1, adding a tool registry discovery feature and fixing release verification issues. The update improves extensibility and stabilizes the release pipeline for the CLI tool.

Releases·Tool Release

Google releases gemini-cli v0.58.0 with sandbox and ignore-path fixes

Google shipped gemini-cli v0.58.0 on GitHub, a maintenance release bundling fixes and refactors. Changes include consistent symlink evaluation in ignore path handling and isolation of Docker/container runtime sockets and binaries in macOS Seatbelt sandboxing.

Google shipped gemini-cli v0.58.0 on GitHub, a maintenance release bundling fixes and refactors. Changes include consistent symlink evaluation in ignore path handling and isolation of Docker/container runtime sockets and binaries in macOS Seatbelt sandboxing.

Releases·Tool Release

Google releases gemini-cli v0.57.0 with OAuth and eval fixes

Google released gemini-cli v0.57.0, fixing OAuth flow issues in Cloud Workstations and IDE connection mismatches. The update adds a tool call formatter and failure summaries for evaluations, aiding developers in AI-assisted coding workflows.

Google released gemini-cli v0.57.0, fixing OAuth flow issues in Cloud Workstations and IDE connection mismatches. The update adds a tool call formatter and failure summaries for evaluations, aiding developers in AI-assisted coding workflows.

Google released version 0.54.0 of its Gemini CLI, a command-line tool for interacting with Gemini models. The release includes caretaker fixes, such as sanitizing issue titles, and dependency updates. This maintenance release improves stability for developers using the CLI.