Agents and harnesses · Coding agents

Plugin4Shell Exposes Major Coding Agent Vulnerability

Sep 17, 2026, first seen via The Information. Covered by 5 outlets.

Researchers reported that Plugin4Shell could replace pinned plugins and enable zero-click remote code execution across four coding agents.

Read the original at gbhackers.comOpens the publisher's site in a new tab

Also covering this

Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLIgbhackers.com, Sep 18

More in Agents and harnesses

Anthropic launches Claude Code Projects betaSep 17 Google Home Plans Third-Party Agent SupportSep 16 Meta Launches Muse AI Agent Mac AppSep 18 Anthropic Releases Claude Financial Adviser Workflow ToolsSep 14 Salesforce Introduces Enterprise AI Harness CapabilitiesSep 14