Plugin4Shell zero-click flaw hits Claude Code, Codex, Copilot and Gemini CLI
· Source: pasqualepillitteri.it
In short
Plugin4Shell is a zero-click security flaw disclosed in September 2026 that affects four AI coding agents: Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI. The vulnerability allows an attacker controlling a plugin's repository to swap approved code with malicious code without user confirmation by exploiting a Git branch naming quirk. Anthropic and OpenAI have released patches, while Microsoft has not yet fixed Copilot, and Google has retired Gemini CLI.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 39, 2026: AI Moves Into Supply Chain Operations as Evidence, Data and Trust Shape Adoption
Tags: plugin4shell, zero-click, cybersecurity, ai agents, patch, supply chain