Agentsmedium signal
Gemini CLI 0.61.0 asks before running a build it edited and keeps credentials out of its sandbox
Google released Gemini CLI 0.61.0 on September 23, 2026 with two security fixes. The agent now asks before it runs a build or test command after a build file changed in the same session, and before it uses flags that came from outside content. The sandbox no longer receives the host's configuration directory, API keys, or credential files. Setups that mount sensitive paths into the sandbox will now fail to start.
Gemini CLIverified