Plugin4Shell: #ZeroClick RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected
#Plugin4Shell is a zero-click, high-severity #RCE affecting all four major #AICoding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind #AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and auto-installed past the agent's #SHA pinning - a flaw no marketplace can fix, so users must update their agent.
🧑💻 https://www.air.security/blog-posts/plugin4shell
𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕™
npub1mg…zjewv
2026-09-22 13:35:56 UTC
Author Public Key
npub1mgm90y9lsclc33eq5284adjxxm0k4dz7jp0z7ca9z378u8p8sjfskzjewvSeen on
wss://relay.ditto.pubPublished at
2026-09-22 13:35:56 UTCEvent JSON
{
"id": "f18dbb00268692e2ce1b6bdd9e21c002fdabc7854b8f74796d1ea312ca9e44ef",
"pubkey": "da365790bf863f88c720a28f5eb64636df6ab45e905e2f63a5147c7e1c278493",
"created_at": 1790084156,
"kind": 1,
"tags": [
[
"t",
"zeroclick"
],
[
"t",
"plugin4shell"
],
[
"t",
"rce"
],
[
"t",
"aicoding"
],
[
"t",
"ai"
],
[
"t",
"sha"
],
[
"proxy",
"https://chaos.social/users/kubikpixel/statuses/117314955286371786",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Plugin4Shell: #ZeroClick RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected\n\n#Plugin4Shell is a zero-click, high-severity #RCE affecting all four major #AICoding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind #AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and auto-installed past the agent's #SHA pinning - a flaw no marketplace can fix, so users must update their agent.\n\n🧑💻 https://www.air.security/blog-posts/plugin4shell",
"sig": "3327c6c6aa11e14b632c5d2390d24ed8fc2177247675fe22006bb36bdc743c1b6062ab9ba010f170a717138586050a32a78973048ea283c4f9d7457cf57d4698"
}