# Gemini CLI v0.53.0-preview.0: RCE and prompt-injection loop fixes

> Preview release weighted toward security and reliability fixes in the agent core and A2A server, including workspace-trust enforcement to prevent RCE and mitigation for infinite ReAct/prompt-injection loops. Affects anyone running the A2A server or the macOS sandbox profiles.

| | |
|---|---|
| **Tool** | Gemini CLI |
| **Version** | v0.53.0-preview.0 |
| **Kind** | release |
| **Published** | 2026-07-22 |
| **Observed** | 2026-08-11 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | security, fix, feature |

## What changed


- `a2a-server`: enforce workspace trust and task isolation to prevent RCE (#28470)
- `core`: mitigate infinite ReAct loops and prompt injection loops (#28429)
- `cli`: macOS permissive Seatbelt profiles realigned to a deny-default model (#28424)
- `core`: sequentially verify cached credentials, restore `GOOGLE_APPLICATION_CREDENTIALS` fallback (#28472)
- `core,a2a`: group cancelled tool responses and coalesce consecutive roles, fixing 400 Bad Request (#28407)
- New LLM triage orchestrator and container build for caretaker triage (#28345)
- New eval coverage report command (#28169)


## Sources

- [github_release](https://github.com/google-gemini/gemini-cli/releases/tag/v0.53.0-preview.0) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/gemini-cli/v0-53-0-preview-0
Entity: https://changelogs.info/gemini-cli
Event ID: `evt_2026-07-22_gemini-cli_v0-53-0-preview-0`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.