Security47 mSeptember 25, 2026, 06:08

Plugin4Shell flaw hits Claude Code, Codex, Gemini CLI and Copilot

Researchers disclosed a vulnerability class called Plugin4Shell affecting four major AI coding agents: Claude Code, Codex, Gemini CLI and Copilot. Broken SHA-pinning verification lets attackers swap an approved plugin for malicious code, and default auto-update runs it silently with full agent-level access to files, credentials and CI pipelines.

DEV Community

Open source

Plugin4Shell flaw hits Claude Code, Codex, Gemini CLI and Copilot

Flaw affects Claude Code, Codex, Gemini CLI and Copilot
SHA-pinning verification fails to guarantee code immutability
Auto-update runs swapped plugins with no user prompt
Attackers gain access to files, credentials and cloud accounts

#Claude#Codex#Gemini#Copilot

Better face recognition exposes limits of image quality scores

Security

Group-IB finds RemControl Android trojan using AI phishing and Play Protect evasion

Security

Bitget halts withdrawals after $351.6M unauthorized transfers

Security

Plugin4Shell flaw hits Claude Code, Codex, Gemini CLI and Copilot

Better face recognition exposes limits of image quality scores

Group-IB finds RemControl Android trojan using AI phishing and Play Protect evasion

Bitget halts withdrawals after $351.6M unauthorized transfers

DigiCert launches Quantum Central for post-quantum cryptography readiness