Tag: plugin4shell
2 articles
Flaw in AI Coding Agents Exposes Users to Plugin Swaps
A newly discovered flaw, dubbed Plugin4Shell, allows hackers to swap out a plugin installed by an AI coding agent with malicious code, putting users at risk of having their files read, credentials stolen, and accounts compromised. This vulnerability was found in all four major AI coding agents, and the affected vendors have been notified.
AI Coding Agents Expose Zero-Click Flaw
A newly discovered vulnerability, dubbed Plugin4Shell, allows attackers to execute remote code with just a single click - or none at all - giving them carte blanche access to sensitive data and assets. This zero-click flaw in AI coding agents highlights the urgent need for updated security measures to prevent devastating supply-chain attacks.