AINewsnow

A zero-click RCE flaw in AI coding agents could have exposed enterprise systems

This story is from 2026-09-17. It is preserved in the archive; the latest stories are on the live feed.

Popular AI coding agents such as OpenAI’s Codex, Anthropic’s Claude Code, Google’s Gemini CLI, and Microsoft-owned GitHub Copilot were vulnerable to a zero-click attack that enabled attackers to execute malicious code, even without developer interaction, by swapping a trusted plugin from an online…

Read the full story at InfoWorld AI ↗

Timeline · 2 reports

  1. 2026-09-18 15:39 · InfoWorld AI
    A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
  2. 2026-09-17 14:22 · r/ChatGPTCoding
    [ Agenteq ] A single canoncial source for AI coding agents rules

More stories

  1. AI chat conversations may be reviewed by human staff, raising privacy concerns — Tom's Guide AI
  2. I moved my MCP servers from Claude to Codex. Here's the cheat sheet — DEV Community — AI
  3. OpenAI to acquire Pierre Computer Company, Inc. — OpenAI News
  4. How to use MCP in the Web Browser (ChatGPT, Claude, DeepSeek & Gemini) with Web MCP Bridge — DEV Community — AI
  5. GEO for small businesses: how to get found and recommended by AI engines — DEV Community — AI
  6. Can AI Assistants Actually Read Your Website? A 15-Minute Access Check — DEV Community — AI
  7. Claude, Copilot and Gemini: work plans do not train by default. A personal login is a different set of terms — DEV Community — AI
  8. Claude vs. ChatGPT vs. Gemini for business: How to choose the right AI model — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →