00:00
2026-09-20
digitalapplied.com
ai-agents
Your Agent Pinned a Plugin to a Hash. It Got the Branch.
AIR Security researchers Or Nevo, Dor Granat and Niv Hoffman published a September 17, 2026 advisory detailing Plugin4Shell, a flaw in which four coding agents pinned plugins to a commit hash but chec…