{"slug": "flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps", "title": "Flaw in AI Coding Agents Exposes Users to Plugin Swaps", "summary": "A newly discovered flaw dubbed Plugin4Shell lets attackers swap out a plugin installed by an AI coding agent with malicious code, enabling file reads, credential theft, and account compromise. The vulnerability was found in all four major AI coding agents, and the affected vendors have been notified.", "body_md": "A newly discovered flaw, dubbed Plugin4Shell, allows hackers to swap out a plugin installed by an AI coding agent with malicious code, putting users at risk of having their files read, credentials stolen, and accounts compromised. This vulnerability was found in all four major AI coding agents, and the affected vendors have been notified.", "url": "https://wpnews.pro/news/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps", "canonical_source": "https://osintsights.com/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps", "published_at": "2026-09-18 14:05:26+00:00", "updated_at": "2026-09-18 14:27:58.531534+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "artificial-intelligence"], "entities": ["Plugin4Shell"], "alternates": {"html": "https://wpnews.pro/news/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps", "markdown": "https://wpnews.pro/news/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps.md", "text": "https://wpnews.pro/news/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps.txt", "jsonld": "https://wpnews.pro/news/flaw-in-ai-coding-agents-exposes-users-to-plugin-swaps.jsonld"}}