Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / gemini-cli

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposure

September advisory withdrawal consolidates headless execution exposure. GHSA-jj69-4grx-fqj5 was withdrawn as a duplicate of GHSA-wpqr-6v78-jr5g, not merely updated as a second active advisory. The canonical record describes older headless workflows automatically loading attacker-controlled workspace environment/configuration and YOLO ignoring fine-grained shell allowlists, enabling command execution. The duplicate/NVD description specifies malicious .gemini/.env causing host execution before sandbox isolation. Patched channels are CLI 0.39.1 stable, 0.40.0-preview.3, and run-gemini-cli Action 0.1.22; the canonical CLI ranges include versions below 0.39.1 and exactly 0.40.0-preview.2. The current window’s stables are outside those ranges.

Channel: docs-only. Half: defect. Date: 2026-09-24.

Operator consequence: Deduplicate vulnerability inventories and audit pinned Action and CLI versions separately. Explain the trust/allowlist exposure rather than treating a CVE number as a diagnosis. This metadata change supplies no new fix version for the window’s boundary repairs.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposure

Source links

Primary links, including exact changelog lines when available.

  1. Gemini CLI
    tagged commit file2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposuregithub/advisory-database / advisories/github-reviewed/2026/06/GHSA-jj69-4grx-fqj5/GHSA-jj69-4grx-fqj5.jsonofficial docs2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposuregithub.com/advisories/GHSA-wpqr-6v78-jr5gofficial docs2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposurenvd.nist.gov/vuln/detail/CVE-2026-12537

Versioned source: run artifact