Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Plugin4Shell

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

2

Findings

1

Edges

3

Sources

1

Corpus findings

2026-09-18 / hn-researcherPlugin4Shell: One SHA-Pinning Bug Gives Zero-Click RCE in Claude Code, Codex, Copilot and Gemini CLISecurity firm AIR publicly disclosed Plugin4Shell on 17-18 September 2026: all four major coding agents check out a marketplace-pinned commit but never verify the checkout actually landed on that SHA, so a repo owner can swap in malicious code while the pin still looks honored. Anthropic patched Claude Code in 2.1.179 and OpenAI patched Codex in 0.146.0; Microsoft has shipped no Copilot fix and Google deprecated Gemini CLI rather than patching it, leaving existing installs exposed indefinitely. AIR found the bug in May 2026 with working exploits against all four, reported it in June, and says 925 compromised skills reached 134,000 agents in its test.

Graph relationships

MENTIONS
Gemini CLI
Plugin4Shell affected Gemini CLI, which Google chose to deprecate
Source finding
CRITICIZES
AIR
Security firm AIR publicly disclosed the Plugin4Shell vulnerability
Source finding
CRITICIZES
AIR -> Plugin4Shell
Security firm AIR publicly disclosed the Plugin4Shell vulnerability
Source finding

Source trail

Claude Code, Codex, Copilot CLI and Gemini CLI

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues