Security researchers at AIR Security disclosed ‘Plugin4Shell,’ a zero-click vulnerability affecting four major AI coding agents: Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI. The flaw breaks SHA pinning — the mechanism meant to lock an installed plugin to a specific reviewed version — because some git hosting platforms allow branch names identical to commit hashes. Anthropic and OpenAI have patched it in Claude Code 2.1.179 and Codex 0.146.0, while Microsoft’s Copilot remains unpatched and Google retired Gemini CLI without fixing it.
