Chisato · · 6 min read Plugin4Shell: Zero-Click RCE in AI Coding Agents
Plugin4Shell is a zero-click RCE in Claude Code, Codex, Copilot and Gemini CLI that swaps pinned plugin code. What it is, who's patched, and how to respond.
#Security
#AI
#DevTools