A single git trick beat the safety lock on four AI coding agents

Researchers at Air Security disclosed Plugin4Shell, a vulnerability allowing attackers to bypass plugin code pinning in four major AI coding agents—Anthropic's Claude Code, OpenAI's Codex, GitHub Copilot, and Google's Gemini CLI—enabling zero-click remote code execution. Anthropic and OpenAI have patched their agents, Microsoft has not fixed Copilot, and Google is retiring Gemini CLI instead of patching it.