Version floors for AI coding agents: a check script and the August 2026 numbers

Between June and August 2026, several AI coding agents received fixes for flaws that let untrusted text lead to code execution or data theft. The fixes sit at specific versions: Claude Code 2.1.163, Gemini CLI 0.39.1, the run-gemini-cli GitHub Action 0.1.22, and Cursor 3.0. The most recent of these became public on 5 August 2026, when Novee Security presented at Black Hat USA.

A version floor is a minimum version your tooling enforces. Developer tools update themselves, until they do not, and pinned CI images never do.

What's affected

What to do now

Start with a script that reports installed versions on a laptop or build image:

#!/usr/bin/env bash
check() { # name, installed, floor
  if [ -z "$2" ]; then echo "$1: not installed"; return; fi
  if [ "$(printf '%s\n%s\n' "$3" "$2" | sort -V | head -1)" = "$3" ]; then
    echo "$1: $2 OK (floor $3)"
  else
    echo "$1: $2 BELOW FLOOR $3"
  fi
}
claude_v=$(claude --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
gemini_v=$(gemini --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
check "Claude Code" "$claude_v" 2.1.163
check "Gemini CLI" "$gemini_v" 0.39.1

Then do the same for pipelines, which is where old versions hide:

grep -rnE "gemini_cli_version|run-gemini-cli@|claude-code@|@anthropic-ai/claude-code" .github/workflows/ Dockerfile* 2>/dev/null

1. Add the check to onboarding scripts and to a scheduled job on managed devices.
2. Replace floating or old pinned versions in workflow files and Dockerfiles with versions at or above the floors.
3. Keep a short table like the one above in your engineering docs and update it when a new advisory lands.
4. For Cursor, read the version in the application; Cursor 3.0 shipped on 2 April 2026.
5. Treat a version bump as one control among several. Narrow permissions and egress limits still matter after patching.

Quick check

Sources

• GitHub Advisory Database: GHSA-7835-87q9-rgvv (Claude Code)
• GitHub Advisory Database: GHSA-fg94-h982-f3mm (Claude Code)
• GitHub Advisory Database: GHSA-wpqr-6v78-jr5g (Gemini CLI)
• The Hacker News: Critical Cursor flaws
• Hackread: Black Hat USA 2026 coding agent research