<![CDATA[Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents]]>A flaw dubbed Plugin4Shell affects four widely used AI coding agents, according to security firm Air Security. The issue allows anyone who controls a plugin's code repository to swap the plugin an agent installs for a malicious one, even when the agent has pinned that plugin to a specific reviewed version.

In other words, the version lock a developer relies on for integrity does not prevent the underlying repository from serving different code at install time.

Patch status reported by Air Security:

  • Anthropic has patched the issue in Claude Code 2.1.179
  • OpenAI has patched the issue in Codex 0.146.0
  • GitHub Copilot currently has no fix, according to the firm

The full details on affected versions across all four agents, along with technical specifics of the attack, were not included in the available excerpt. Organizations running these agents should verify their installed versions and update where a fix exists.

Source: The Hacker News

If your team uses any of these AI coding agents, have you confirmed which version you're running and whether your plugin sources are pinned to trusted repositories?

]]>https://xploitlk.com/topic/387/plugin4shell-lets-repository-owners-swap-pinned-plugin-code-across-four-ai-coding-agentsRSS for NodeTue, 27 Oct 2026 11:22:09 GMTSat, 19 Sep 2026 06:30:19 GMT60