Cybersecurity firm AIR uncovered Plugin4Shell, a critical zero-click RCE flaw across Claude Code, Codex, GitHub Copilot, and Gemini CLI. The vulnerability bypasses plugin SHA-pinning validation, enabling attackers to substitute legitimate extensions with malicious payloads during unattended sessions.
Key Takeaways
- ✓Bypasses extension SHA pinning to hijack unattended plugin installs with arbitrary code
- ✓Afflicts prominent coding CLI assistants, prompting immediate isolation protocols
- ✓Sparks urgent adoption of cryptographic code-signing for third-party MCP extensions
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.