Skip to content

Fix: Disallow overriding IDE stdio via workspace .env (RCE) - #25022

Merged
scidomino merged 2 commits into
google-gemini:mainfrom
M0nd0R:fix-ide-rce-env-bypass
Apr 21, 2026
Merged

scidomino merged 2 commits into
google-gemini:mainfrom
M0nd0R:fix-ide-rce-env-bypass

format

5e2288f
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Apr 21, 2026 in 15s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

20f4a7e Author: @M0nd0R <nm*****97​@gmail.com>
5e2288f Author: @scidomino <sc*****no​@gmail.com>

(Only the first commit for a unique contributor is listed.)