Security49 mSeptember 22, 2026, 15:51

Plugin4Shell: zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI

AIR Security disclosed Plugin4Shell, a flaw that lets attackers silently swap SHA-pinned plugin code in four popular AI coding agents. Anthropic and OpenAI have shipped patches, Microsoft has not fixed Copilot, and Google is discontinuing Gemini CLI instead.

DEV Community Open source

Plugin4Shell: zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI

Flaw affects Claude Code, Codex, GitHub Copilot and Gemini CLI
Anthropic fixed it in 2.1.179, OpenAI in 0.146.0
Microsoft has no patch; Google is retiring Gemini CLI
Attack requires a git host allowing hex-named branches

#Anthropic#OpenAI#Microsoft#Google

Gartner: 41% of CISOs Hit by Deepfakes in Audio Calls This Year

Security

Gigabyte patches Control Center flaws that exposed kernel to attackers

Security

Scammers sell fake AI subscriptions up to $2,000 a year via genuine Google sign-in

Security

Plugin4Shell: zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI

Gartner: 41% of CISOs Hit by Deepfakes in Audio Calls This Year

Gigabyte patches Control Center flaws that exposed kernel to attackers

Scammers sell fake AI subscriptions up to $2,000 a year via genuine Google sign-in

CERT-In flags 14 ISC BIND flaws enabling cache poisoning and zone injection