2026-07-01-gemini-cli-skill-install-path-traversal-fix-reaches-stable-in-v0-49

Skill-install path-traversal fix reaches stable in v0.49.0 (channel: tagged-release, 2026-06-25). Operator consequence: The path-traversal vulnerability in skill install/link/uninstall (PR #27767, merge bca5667) that was pending last window is now shipped in a stable release. Malicious SKILL.md frontmatter names (e.g. '..'), traversal sequences during remote skill clone/extract, and fragile prefix-match uninstall could previously escape the target directory; the fix replaces startsWith checks with path.relative validation. Operators running skills from untrusted sources should upgrade to v0.49.0 or later. Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/google-gemini/gemini-cli/releases/tag/v0.49.0

Finding metadata

Confidence: high

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-gemini-cli-skill-install-path-traversal-fix-reaches-stable-in-v0-49

Accepted signals

Gemini CLI's OSS repo shipped the skill path-traversal fix to stable (v0.49.0) and renamed coreTools -- fixes now landing in a CLI whose consumers were cut off / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Gemini CLI
github release2026-07-01-gemini-cli-skill-install-path-traversal-fix-reaches-stable-in-v0-49google-gemini/gemini-cli / v0.49.0

Versioned source: run artifact