Tools
Two agent CLIs shipped SSRF and Host-header fixes in the same 48 hours
gemini-cli's 2026-08-27 nightly landed a fix preventing SSRF in MCP OAuth metadata discovery and authentication (PR #29081), and google/adk-python v1.39.1 the same day added a Host header check on its CLI server plus artifact reference scoping and path-segment validation. pydantic-ai v2.35.3, published 2026-08-28, scopes `safe_download` cookies to their original hostnames. Discovery endpoints an agent fetches on your behalf are turning out to be a repeatable SSRF class, and all three fixes are in code paths a self-hosted agent runs by default.
Source
↳ Follow the thread