Plugin4Shell Exposes Major AI Coding Agents to Zero-Click Remote Code Execution Attacks
Security researchers at Air Security uncovered Plugin4Shell, a critical zero-click RCE flaw affecting all major AI coding agents including Anthropic's Claude Code, OpenAI's Codex, GitHub Copilot, and Google's Gemini CLI. The vulnerability bypasses SHA-pinning mechanisms in plugin marketplaces, allowing attackers to swap trusted code for malicious payloads without user interaction.