# AI Coding Agents Expose Zero-Click Flaw > Source: > Published: 2026-09-17 23:03:05+00:00 A newly discovered vulnerability, dubbed Plugin4Shell, allows attackers to execute remote code with just a single click - or none at all - giving them carte blanche access to sensitive data and assets. This zero-click flaw in AI coding agents highlights the urgent need for updated security measures to prevent devastating supply-chain attacks.