Air Discloses Plugin4Shell RCE in Claude Code, Codex, GitHub Copilot and Gemini CLI

Air Security has disclosed Plugin4Shell, a high-severity zero-click remote code execution flaw that it says affects Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI through their plugin marketplace supply chains. The issue is not in the language models themselves but in how coding agents resolve and verify pinned plugin code before auto-updating installed add-ons.