06:08
2026-09-18
byteiota.com
ai-safety
Plugin4Shell: Zero-Click RCE in AI Coding Agents
Air Security disclosed Plugin4Shell on September 17, a zero-click remote code execution vulnerability in the plugin ecosystems of Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI that bypasse…