Vibe Coding
Gemini CLI patched indirect prompt injection via build file modifications and untrusted flags
v0.61.0-preview.0 (2026-09-15) includes PR #29250, "prevent indirect prompt injection via build file modifications and untrusted flags" — the attack where an agent reads a repo's build configuration and the file's contents become instructions. The 2026-09-18 nightly adds retained OAuth refresh tokens on refresh with idempotent credential deletion (#29339) and PTY file-descriptor cleanup plus execution lifecycle fixes (#29340). Build files are an underrated injection surface precisely because agents read them as configuration rather than as content, and every agent that runs a build inherits the same exposure.
Source
↳ Follow the thread