Agents and harnesses · Coding agents
Plugin4Shell Exposes Major Coding Agent Vulnerability
Researchers reported that Plugin4Shell could replace pinned plugins and enable zero-click remote code execution across four coding agents.
Read the original at theinformation.comOpens the publisher's site in a new tabAlso covering this
Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLIgbhackers.com, Sep 18Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLIcybersecuritynews.com, Sep 18Plugin4Shell Flaw Hits Claude Code, Codex, Copilot and Gemini CLI - Startup Fortunestartupfortune.com, Sep 18Critical flaw in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI | heise onlineheise.de, Sep 21