Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

A zero-click remote code execution vulnerability affects four major AI coding agents — Claude Code, Codex, GitHub Copilot and Gemini CLI — and two of them remain unpatched, according to security researchers at AIR. AIR called it "the first supply chain vulnerability of the AI agent ecosystem," warning that anyone running a major coding agent that installs plugins from a marketplace is exposed, with an attacker gaining the same reach into company systems and data as the employee running the agent.