Canonical AI event

Gemini CLI Robot updates version to 0.59.0, fixes SSRF vulnerability.

The latest release includes fixes for SSRF in MCP OAuth and workspace trust enforcement.

28 Aug 20261 verified claims1 sources7 observations
What happened

The official source reports this update: Release v0.59.0. What's Changed Changelog for v0.58.0-preview.0 by @gemini-cli-robot in #29082 chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in #29083 fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081 fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099 Full Changelog : v0.58.0...v0.59.0

Why it matters

This official update documents a development concerning Release v0.59.0. Its practical significance depends on the scope and evidence stated by the source.

What to watch next

Read the official source update and verify its stated scope, evidence and timing before acting on it.

Connected knowledge

Entities affected by this event

Continue this topic
Evidence trail

Sources behind the event