# Plugin4Shell: Your AI Coding Agent’s Plugin Store Is an RCE

> Source: <https://byteiota.com/plugin4shell-your-ai-coding-agents-plugin-store-is-an-rce/>
> Published: 2026-09-30 02:09:50+00:00

Plugin4Shell is a zero-click RCE hitting Claude Code, Codex, Copilot, and Gemini CLI via SHA pinning bypass. Check patch status and act now.

The post 
Plugin4Shell: Your AI Coding Agent’s Plugin Store Is an RCE
 appeared first on 
byteiota
.