Gemini CLI nightly fixes a memory-import symlink escape

Gemini CLI nightly v0.51.0-nightly.20260702.gff00dacd9 fixes a symbolic-link directory escape in the memory import processor. Channel: preview-or-beta. Operator consequence: until the fix reaches preview or stable, treat untrusted GEMINI.md memory imports as a possible host-file read path through symlinked directories.

Receipt

https://github.com/google-gemini/gemini-cli/releases/tag/v0.51.0-nightly.20260702.gff00dacd9

Finding metadata

Confidence: high

Run: 2026-07-02-weekly-digest-2026-07-01_2026-07-02-frontier-v0

Finding ID: 2026-07-02-gemini-cli-nightly-memory-symlink-escape

Accepted signals

Gemini CLI fixes a memory-import symlink escape in nightly only / 2026-07-02

Source links

Primary links, including exact changelog lines when available.

Gemini CLI
github releaseGemini CLI nightly fixes a memory-import symlink escapegoogle-gemini/gemini-cli / v0.51.0-nightly.20260702.gff00dacd9

Versioned source: run artifact