# Gemini CLI nightly 20260718: ReAct/prompt-injection loop mitigation, deny-default Seatbelt

> Nightly build with a core fix for infinite ReAct and prompt-injection loops, plus a refactor aligning the macOS permissive Seatbelt sandbox profiles with a deny-default model. Relevant if you run the CLI sandboxed on macOS or have seen it stuck looping.

| | |
|---|---|
| **Tool** | Gemini CLI |
| **Version** | v0.52.0-nightly.20260718.gacae7124b |
| **Kind** | release |
| **Published** | 2026-07-18 |
| **Observed** | 2026-08-11 |
| **Significance** | 2/5 |
| **Breaking** | no |
| **Categories** | fix, security |

## What changed


- core: mitigate infinite ReAct loops and prompt injection loops (#28429)
- cli: macOS permissive Seatbelt profiles aligned with a deny-default model (#28424)
- caretaker-triage: LLM triage orchestrator and container build (#28345)


## Sources

- [github_release](https://github.com/google-gemini/gemini-cli/releases/tag/v0.52.0-nightly.20260718.gacae7124b) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/gemini-cli/v0-52-0-nightly-20260718-gacae7124b
Entity: https://changelogs.info/gemini-cli
Event ID: `evt_2026-07-18_gemini-cli_v0-52-0-nightly-20260718-gacae7124b`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.