Plugin4Shell: one flaw hit Claude Code, Codex, Copilot and Gemini CLI

Researchers at AIR found that four major AI coding agents did not check that an installed plugin matched the version it was pinned to, so an attacker could swap in malicious code with no click from the user. Claude Code and Codex are patched. Copilot has no fix, and Gemini CLI will not get one.

• Update Claude Code to 2.1.179 or later and Codex to 0.146.0 or later.
• Remove plugins you do not use, and move off Gemini CLI.

Source: Help Net Security. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. The picture is our own graphic. How we source and credit