{"slug": "ai-coding-agents-expose-zero-click-flaw", "title": "AI Coding Agents Expose Zero-Click Flaw", "summary": "A newly discovered vulnerability dubbed Plugin4Shell allows attackers to execute remote code with a single click or none at all in AI coding agents, according to the report. The zero-click flaw grants attackers access to sensitive data and assets, highlighting the need for updated security measures to prevent supply-chain attacks.", "body_md": "A newly discovered vulnerability, dubbed Plugin4Shell, allows attackers to execute remote code with just a single click - or none at all - giving them carte blanche access to sensitive data and assets. This zero-click flaw in AI coding agents highlights the urgent need for updated security measures to prevent devastating supply-chain attacks.", "url": "https://wpnews.pro/news/ai-coding-agents-expose-zero-click-flaw", "canonical_source": "https://osintsights.com/ai-coding-agents-expose-zero-click-flaw", "published_at": "2026-09-17 23:03:05+00:00", "updated_at": "2026-09-17 23:24:28.267372+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "ai-safety"], "entities": ["Plugin4Shell"], "alternates": {"html": "https://wpnews.pro/news/ai-coding-agents-expose-zero-click-flaw", "markdown": "https://wpnews.pro/news/ai-coding-agents-expose-zero-click-flaw.md", "text": "https://wpnews.pro/news/ai-coding-agents-expose-zero-click-flaw.txt", "jsonld": "https://wpnews.pro/news/ai-coding-agents-expose-zero-click-flaw.jsonld"}}