Gemini CLI 0.61.0 hardens sandbox boundaries and prompt-injection defenses

Google’s Gemini CLI v0.61.0 is the latest stable release as of September 23, 2026. Its headline changes focus on safer agent execution and more predictable model routing.

Prompt-injection and sandbox hardening

The release prevents indirect prompt-injection paths that use build-file modifications and untrusted command flags. It also hardens filesystem boundaries and isolates internal runtime state inside sandbox environments.

These changes reduce the surface available to untrusted repository content and commands, but they do not make an agent automatically safe. Keep least-privilege credentials, review tool approvals, and test the exact sandbox configuration used in CI or a developer workstation.

Model routing and agent-loop reliability

Gemini CLI 0.61.0 preserves explicit versioned Flash model IDs and uses them directly during routing and execution. That avoids silently replacing a pinned model identifier when a workflow depends on a particular version.

The release also ensures that internal AgentLoopContext properties survive object-spread operations, improving reliability in the main agent loop. The full release includes related fixes carried from the preview line.

Upgrade guidance

Install the stable release in a test environment first. Verify filesystem access, build tools, extension behavior, explicit model IDs, and the failure mode for untrusted flags before upgrading unattended agents. Treat a more restrictive sandbox as a behavior change: scripts that previously relied on broad filesystem access may now need an explicit, reviewed configuration.

Sources

• Gemini CLI — “Latest stable release: v0.61.0” (September 23, 2026): https://geminicli.com/docs/changelogs/latest/
• Gemini CLI — release notes: https://geminicli.com/docs/changelogs/
• Google Gemini CLI — GitHub release v0.61.0: https://github.com/google-gemini/gemini-cli/releases/tag/v0.61.0
• Google for Developers on X — official developer updates: https://x.com/googledevs