AI Coding Roundup — September 14, 2026: Cursor Ships Projects, Gemini CLI Patches an MCP SSRF Hole

Yesterday's roundup covered a two-week sprint across Claude Code, GitHub Copilot, OpenAI Codex, and OpenCode. Checking each of their official changelogs again today turns up nothing new past what was already reported — but three other tools developers rely on daily picked up the slack. Cursor shipped a genuinely new feature for coordinating work across weeks, not turns; Gemini CLI closed a real SSRF hole in its MCP OAuth flow; and Cline quietly swapped default models for dozens of providers. Here's what's actually new as of September 14, 2026.

Executive Summary

• Cursor launched Projects on September 10 — a coordinator agent that delegates to many subagents in parallel, keeps running in the cloud after you close your laptop, and can watch Slack channels, PRs, and schedules over weeks of work.
• Gemini CLI reached v0.59.0 on September 8, fixing a server-side request forgery hole in MCP OAuth metadata discovery, enforcing fail-closed workspace trust, and filtering available MCP servers in restricted mode.
• Cline shipped v4.1.17, changing default models for 57 providers — Anthropic now resolves to Claude Fable 5.1 — refreshing its catalog with ten new providers, and fixing a memory-ballooning bug in long-running background sessions.
• The four tools covered in yesterday's roundup haven't moved: Claude Code is still at 2.1.270, Copilot's latest is its September 7 weekly release, Codex CLI is at 0.154.0, and OpenCode is at v1.18.30 — worth a read if you missed it.

Cursor Projects: Coordinating Work That Spans Weeks, Not Turns

Cursor introduced Projects on September 10 — its answer to work too large for a single agent session, like a full feature build, a migration, or a new app. A coordinator agent breaks the work down and delegates pieces to subagents running in parallel, while shared context syncs across every agent involved so accumulated knowledge about the codebase and your preferences carries from one task to the next. Because execution happens in the cloud, a Project keeps running after you close your laptop, and it can subscribe to Slack channels, follow pull requests, or run on a schedule without being re-prompted.

Projects lands on top of two other recent moves that point the same direction: self-hosted machines (Sep 2), which let organizations keep tool execution and secrets on their own infrastructure — AWS Lambda, Coder, Cloudflare, Daytona, Modal, Namespace, Vercel, and E2B are all supported — and Start From Scratch (Aug 27), which lets a cloud agent begin work without an existing repository at all. Together they're a clear bet on agents that run for longer, with less supervision, and more infrastructure control than a single chat session.

Gemini CLI v0.59.0: Closing an MCP OAuth SSRF Hole

Gemini CLI reached v0.59.0 on September 8, and this one is a security release rather than a feature drop. The headline fix prevents server-side request forgery (SSRF) during MCP OAuth metadata discovery and authentication — a flow that, unpatched, could be abused to make the CLI issue requests to internal or unintended hosts on a victim's behalf. The same release enforces a fail-closed workspace-trust model, so untrusted workspaces are denied by default rather than silently allowed, and filters which MCP servers are available at all when the CLI runs in restricted mode. Full details, including the merged pull requests behind the fix, are on Gemini CLI's own changelog.

If your setup connects Gemini CLI to any remote MCP server over OAuth, this is worth updating for on its own — SSRF fixes in an authentication path aren't the kind of thing to leave for the next routine upgrade.

Cline v4.1.17: A Quiet Default-Model Swap With Broad Reach

Cline, the open-source autonomous coding agent distributed as a VS Code/JetBrains extension, an SDK, and a CLI, shipped v4.1.17 with a change easy to miss but wide in effect: default models changed for 57 providers, with the Anthropic default now resolving to Claude Fable 5.1 instead of Claude Opus 5. The built-in model catalog also picked up ten new providers — including Bothub, OpenReason, SenseNova, TokenGo, TokenRouter, Vancine, and Volcengine Ark — and ClinePass coverage is now surfaced directly in the app with cards and banners explaining what a plan includes.

The same release fixes a memory-ballooning bug in the background Hub process during long sessions, hook-script and chat-render crashes, cost-estimate display for subscription-billed tasks, and tool calling across multiple model families — worth the upgrade even if the model-routing change doesn't affect you directly. Full entries are in Cline's changelog.

If you pin a provider explicitly, this won't touch you. But if you've been relying on Cline's Anthropic default without naming a model, you moved to Fable 5.1 without asking for it — worth confirming that's actually what you want billed.

The Big Four: Nothing New Since Yesterday

Re-checking each project's own changelog confirms none of the four tools covered in yesterday's roundup shipped anything today. Claude Code is still at 2.1.270 per Anthropic's changelog; GitHub Copilot's most recent post is still its September 7 weekly release; OpenAI Codex CLI holds at 0.154.0 per OpenAI's changelog; and OpenCode is at v1.18.30 per its own changelog. A quiet day after two weeks of near-daily releases from Claude Code alone isn't unusual — it's a reasonable window to update and stabilize rather than chase a moving target.

What to Prioritize

• Update Gemini CLI first if you use MCP over OAuth. v0.59.0 closes an SSRF path in authentication, not a cosmetic bug — treat it like a security patch, not a routine upgrade.
• Check what Cline is actually billing you for. The default-model swap to Claude Fable 5.1 across 57 providers happens silently for anyone who hasn't pinned a model explicitly.
• Evaluate Cursor Projects if your backlog has multi-week work. It's built for exactly the kind of feature or migration that doesn't fit a single agent session — try it on something you'd otherwise break into a dozen manual tasks.
• Use the quiet window on Claude Code, Copilot, Codex, and OpenCode to catch up. All four were moving fast through September 12; if you skipped updates during that stretch, this is a good day to apply them without chasing a moving target.
• Verify claims against each vendor's own changelog. Every version, date, and fix above was cross-checked against Cursor's, Gemini CLI's, Cline's, Anthropic's, GitHub's, OpenAI's, and OpenCode's own changelog pages linked throughout.