2026-07-01-gemini-cli-at-reference-file-defensive-path-resolution-null-byte-sa

At-reference (@file) defensive path resolution + null-byte sanitization landed on main (not yet stable) (channel: main-unreleased, 2026-06-30). Operator consequence: Centralized defensive path resolution for read_file/replace/write_file when the model emits '@'-prefixed paths (e.g. @policies/foo.txt): strips leading @ when the literal path is absent, sanitizes null bytes to avoid crashes, resolves symlinks to canonical paths (fixes macOS /var vs /private/var), and enforces plan-mode boundary restrictions against traversal. Fresh on main 2026-06-30; not in any stable/preview tag. Operators relying on @-reference file handling or plan-mode boundaries should WATCH for the next stable. Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/google-gemini/gemini-cli/commit/b5fc06e

Finding metadata

Confidence: medium

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-gemini-cli-at-reference-file-defensive-path-resolution-null-byte-sa

Accepted signals

Gemini CLI's OSS repo shipped the skill path-traversal fix to stable (v0.49.0) and renamed coreTools -- fixes now landing in a CLI whose consumers were cut off / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Gemini CLI
maintainer commit2026-07-01-gemini-cli-at-reference-file-defensive-path-resolution-null-byte-sagithub.com/google-gemini/gemini-cli/commit/b5fc06e

Versioned source: run artifact