Flaw in AI Coding Agents Exposes Users to Plugin Swaps
A newly discovered flaw dubbed Plugin4Shell lets attackers swap out a plugin installed by an AI coding agent with malicious code, enabling file reads, credential theft, and account compromise. The vulnerability was found…