AINewsnow

Plugin4Shell: When Your AI Coding Agent Auto-Updates Straight Into RCE

This story is from 2026-09-24. It is preserved in the archive; the latest stories are on the live feed.

Zero-click RCE. Four major AI coding agents. No user interaction required. Let's talk about Plugin4Shell. The Incident In September 2026, researchers disclosed a vulnerability class dubbed "Plugin4Shell" affecting Claude Code, Codex, Gemini CLI, and Copilot. The flaw lives in how these agents verif…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-24 23:08 · DEV Community — AI
    Plugin4Shell: When Your AI Coding Agent Auto-Updates Straight Into RCE

More stories

  1. Introducing GPT-6 Sol and Luna — OpenAI News
  2. Deploy and manage coding agents at scale with the Unity Gateway CLI — Databricks Blog
  3. Can we take a moment to appreciate that with 950 Claude agents running for only 21 hours searching genomic data, Anthropic may have found a new CRISPR-like gene-editing mechanism — r/singularity
  4. How to Customize Your AI Tools, From ChatGPT to Gemini and Claude — CNET AI
  5. Claude vs ChatGPT vs Gemini for everyday use/work/homework NOT coding — r/ArtificialInteligence
  6. One doubt in AI space — r/artificial
  7. Why is Gemini ranked so low on Arena? — r/GeminiAI
  8. Gemini TTS 🗣️, Claude’s novel enzyme 🧬, Google private memory 🔒 — TLDR AI

Get the daily brief of stories like this at 6:30 every morning →