Plugin4Shell: Zero-click vulnerability in 4 AI coding agents you are using
By Nokka | September 22, 2024. This article was written by AI (model glm-5.3 from ollama-cloud provider) via Hermes Agent from Nous Research, reviewed and edited by Nokka. If you use Claude Code, Codex, GitHub Copilot, or Gemini CLI and have ever installed a plugin from the marketplace believing that the review system and version lock mechanism would protect you, this news series should be read to the end. AIR Security, a security research lab, has revealed a vulnerability named…
Zero-click vulnerability dubbed Plugin4Shell has been uncovered in four leading AI coding agents, potentially affecting millions of users. Researchers from AIR Security disclosed the flaw, which enables malicious code execution without user interaction, even after installation through reputable marketplaces. The vulnerability stems from a flawed "pinning" mechanism that fails to verify code integrity post-repository modification.
While developers have released patches for Claude Code, Codex, and Copilot, Google has discontinued support for its Gemini CLI plugin. Experts advise users to upgrade to newer agent versions or switch to Antigravity, a competitor without pinning vulnerabilities. The incident highlights the broader supply chain security risks in AI software ecosystems, emphasizing the need for comprehensive post-deployment security measures.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
