The Frontier · Tags

#plugin4shell

1 published article

• Security · Dispatch

  Plugin4Shell: SHA-pinning bypass hits Claude Code, Codex, Copilot, and Gemini CLI

  Air Security (17 Sep 2026) reports a zero-click RCE path where agents check out a pinned plugin commit but do not verify the working tree. Anthropic and OpenAI shipped patches. Google deprecated Gemini CLI without a fix. Microsoft/GitHub Copilot: no patch as of the report.