release aidev PRERELEASE SIG 4/5

Gemini CLI nightly: RCE fix in a2a-server via workspace trust and task isolation

Nightly build that closes a remote code execution path in the a2a-server component by enforcing workspace trust and isolating tasks. Act on this if you run Gemini CLI's a2a-server.

PUBLISHED2026-07-22

OBSERVED2026-08-11

AGE20d

SOURCES1

a2a-server now enforces workspace trust and isolates tasks; the upstream note states this prevents RCE
Single-change nightly; no other listed items

security fix

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.