gemini-cli - 💡(How to fix) Fix Unprotected Administrative Endpoints in A2A Server [1 comments, 2 participants]

What happened?

Endpoints like /executeCommand, /listCommands, and /tasks/metadata are registered directly on the express app after the A2A middleware, bypassing the A2AExpressApp security layer.

What did you expect to happen?

All administrative or sensitive endpoints should be protected by the same authentication middleware as the core A2A routes.

Client Information

<details> <summary>Client Information</summary>

OS: linux Date: Sunday, May 10, 2026 Gemini CLI: 0.42.0-nightly

</details>

Login information

Automated audit with Gemini CLI.

Anything else we need to know?

File: packages/a2a-server/src/http/app.ts, Lines 247-320. These endpoints allow listing and executing arbitrary commands and viewing task metadata without any authentication.

Severity: High Area: area/security