Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
-
A flaw dubbed Plugin4Shell affects four widely used AI coding agents, according to security firm Air Security. The issue allows anyone who controls a plugin's code repository to swap the plugin an agent installs for a malicious one, even when the agent has pinned that plugin to a specific reviewed version.
In other words, the version lock a developer relies on for integrity does not prevent the underlying repository from serving different code at install time.
Patch status reported by Air Security:
- Anthropic has patched the issue in Claude Code 2.1.179
- OpenAI has patched the issue in Codex 0.146.0
- GitHub Copilot currently has no fix, according to the firm
The full details on affected versions across all four agents, along with technical specifics of the attack, were not included in the available excerpt. Organizations running these agents should verify their installed versions and update where a fix exists.
Source: The Hacker News
If your team uses any of these AI coding agents, have you confirmed which version you're running and whether your plugin sources are pinned to trusted repositories?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login