SecurityThe Registerabout 4 hours ago
Plugin4Shell Flaw Hits Major AI Coding Agents
7 min read
Security researchers at Air discovered a zero-click remote code execution vulnerability, dubbed Plugin4Shell, affecting Anthropic's Claude Code, OpenAI's Codex, Google's Gemini CLI, and Microsoft's Copilot. The flaw exploits plugin marketplaces, potentially granting attackers full access to user assets.
Level
Hype check
Tap to vote and see what everyone thinks.
