Plugin4Shell: a zero-click RCE that bypasses SHA pinning in Claude Code, Codex, GitHub Copilot and Gemini CLI — Copilot is still unpatched and Google deprecated Gemini CLI instead of fixing it · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Saturday, September 19, 2026 · 1 of 5

Plugin4Shell: a zero-click RCE that bypasses SHA pinning in Claude Code, Codex, GitHub Copilot and Gemini CLI — Copilot is still unpatched and Google deprecated Gemini CLI instead of fixing it
Sep 18Security Trending

Read the full briefing · 16 stories