Theregister Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents
Article Content
- •Plugin4Shell affects Claude Code, Codex, GitHub Copilot, and Gemini CLI.
- •The vulnerability allows zero-click remote code execution via malicious plugin swaps.
- •Two major agents remain unpatched, exposing users to significant risk.
Plugin4Shell is a critical zero-click remote code execution vulnerability affecting four major AI coding agents: Claude Code, Codex, GitHub Copilot, and Gemini CLI. Discovered by AIR Security, this flaw allows attackers to exploit trusted plugin marketplaces by swapping legitimate plugins with malicious ones, gaining full access to enterprise systems without user interaction. The vulnerability arises from a failure in SHA pinning, which is supposed to ensure that only verified code runs. While Anthropic and OpenAI have patched their respective agents, GitHub Copilot remains unpatched, and Google has deprecated Gemini CLI without a fix. This vulnerability has been assigned CVE-2026-76460, published on September 16, 2026, and is actively being exploited. The attack could potentially impact millions of users and systems, particularly in Fortune 500 companies that rely on these AI coding agents.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (20)
Following this threat?
Track Anthropic and CVE-2026-76460 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…