Plugin4Shell: SHA pinning bypass in coding agent plugins leads to zero-click RCE
Start here
Air Security research lab disclosed Plugin4Shell: the plugin version pinning mechanism can be bypassed, causing Claude Code, Codex, GitHub Copilot, and Gemini CLI to load attacker-controlled code, potentially leading to zero-click remote code execution. The research noted that Git reference resolution and plugin checkout logic interpret pinned commits inconsistently, and a malicious publisher can exploit this ambiguity to replace the actually loaded plugin content. Background auto-updates in Claude Code and Codex further expand the scope of impact on installed plugins.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- Date not givenair.securityAir Security disclosed Plugin4Shell: SHA pinning in Claude Code, Codex, GitHub Copilot, and Gemini CLI plugins can be bypassed, leading to zero-click RCE
Air Security research lab disclosed Plugin4Shell: the plugin version pinning mechanism can be bypassed, causing Claude Code, Codex, GitHub Copilot, and Gemini CLI to load attacker-controlled code, potentially leading to zero-click remote code execution. The research noted that Git reference resolution and plugin checkout logic interpret pinned commits inconsistently, and a malicious publisher can exploit this ambiguity to replace the actually loaded plugin content. Background auto-updates in Claude Code and Codex further expand the risk to installed plugins.
Related discussion
Attention trend
New sources per day
- Oct 5New1 sources (1 outlets,0 accounts)
- Oct 6New0 sources (0 outlets,0 accounts)
- Oct 7New0 sources (0 outlets,0 accounts)
- Oct 8New0 sources (0 outlets,0 accounts)
- Oct 9New0 sources (0 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)