# Gemini CLI nightly: RCE fix in a2a-server via workspace trust and task isolation

> Nightly build that closes a remote code execution path in the a2a-server component by enforcing workspace trust and isolating tasks. Act on this if you run Gemini CLI's a2a-server.

| | |
|---|---|
| **Tool** | Gemini CLI |
| **Version** | v0.52.0-nightly.20260722.gc776c665b |
| **Kind** | release |
| **Published** | 2026-07-22 |
| **Observed** | 2026-08-11 |
| **Significance** | 4/5 |
| **Breaking** | no |
| **Categories** | security, fix |

## What changed


- `a2a-server` now enforces workspace trust and isolates tasks; the upstream note states this prevents RCE
- Single-change nightly; no other listed items


## Sources

- [github_release](https://github.com/google-gemini/gemini-cli/releases/tag/v0.52.0-nightly.20260722.gc776c665b) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/gemini-cli/v0-52-0-nightly-20260722-gc776c665b
Entity: https://changelogs.info/gemini-cli
Event ID: `evt_2026-07-22_gemini-cli_v0-52-0-nightly-20260722-gc776c665b`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.