Cybersecurity firm AIR uncovered Plugin4Shell, a critical zero-click RCE flaw across Claude Code, Codex, GitHub Copilot, and Gemini CLI. The vulnerability bypasses plugin SHA-pinning validation, enabling attackers to substitute legitimate extensions with malicious payloads during unattended sessions.

Key Takeaways

  • ✓Bypasses extension SHA pinning to hijack unattended plugin installs with arbitrary code
  • ✓Afflicts prominent coding CLI assistants, prompting immediate isolation protocols
  • ✓Sparks urgent adoption of cryptographic code-signing for third-party MCP extensions
🧭

Turn your technical choice into a development budget

Compare 40 dev plans & simulate token costs vs $20/mo subscriptions

Action HubReady to adopt this in production?

Benchmark side-by-side against alternatives, or calculate monthly token cost vs subscription break-even.

Up NextAnthropic Fellows paper: poisoning 0.1% of pretraining data plants a remote-code-execution backdoor in CLI agents that survives clean SFT, DPO and RL
Read Now→