Plugin4Shell: Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLI (original report, opens in a new tab)
AIR Security researchers disclosed a flaw letting a plugin repository owner swap already-approved code past SHA-pinning checks with no user click, affecting four major coding agents; Anthropic patched in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, while Microsoft shipped no Copilot fix and Google retired Gemini CLI uncorrected.