Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not. Related Posts: FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto Critical IBM Guardium Vulnerabilities Need Immediate Patching Critical MongoDB Driver Vulnerabilities Require Immediate Patching The post Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents appeared first on Daily CyberSecurity.