Plugin4Shell – Zero Click RCE Vulnerability found in top four coding agents
.png)
Plugin4Shell is a zero-click, high-severity RCE affecting all four major AI coding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and…
Read the full story at Hacker News ↗
ImpactNotable 39/100
Why it mattersRule-based estimate: event keywords (+18); trust 5/10.
RegionsGlobal
Published1 d ago (Thu, 17 Sep 2026 20:05:31 GMT)
RetrievedFri, 18 Sep 2026 01:30:39 GMT via api
ClassifiedFri, 18 Sep 2026 01:30:50 GMT by heuristic