20:05
2026-09-17
air.security
ai-agents
Plugin4Shell – Zero Click RCE Vulnerability found in top four coding agents
A newly disclosed vulnerability dubbed Plugin4Shell enables zero-click remote code execution in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI by bypassing plugin SHA pinning, according to …