TechPlugin4Shell reportedly enables remote code execution in AI coding tools
The Daily Tech Feed reports that Plugin4Shell lets attackers run code remotely in Claude Code, Codex, GitHub Copilot and Gemini CLI.
TLDR
The Daily Tech Feed reports that Plugin4Shell affects four AI coding tools: Claude Code, Codex, GitHub Copilot and Gemini CLI. A separate September 21, 2026, post describes a zero-click attack using a Git trick and says Anthropic and OpenAI had patched the flaw, while Microsoft had not. That post also says Google declined to patch it because it was retiring Gemini CLI in favor of Antigravity.
