Threat
Plugin4Shell: How to Govern AI Coding Agents in Your Company
Publication date unknown · Discovered mind-core.com
Page published
Publication date unknown · First observed: 5 Nov 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
Plugin4Shell could turn background plugin updates into code execution with a developer’s access to source repositories, cloud credentials and deployment systems, making available fixes and plugin-source restrictions important defensive controls.
Mindcore describes Plugin4Shell as a zero-click remote code execution flaw affecting plugin updates in Claude Code, Codex, GitHub Copilot CLI and Gemini CLI. An attacker controlling a plugin repository can substitute a branch named after a pinned commit hash, exploiting agents that do not verify the resulting checkout. The article reports fixes for Claude Code and Codex, no patch for GitHub Copilot CLI, and deprecation rather than a patch for Gemini CLI.