Skip to content
Safety

AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom.

The Register AI + MLIndependent reporting·
AI brief

Researchers say a flaw they call Plugin4Shell affects all major coding agents, allowing remote code execution without user interaction.

Why it matters: The flaw could let attackers take control of systems running these coding agents.

Written by AI from The Register AI + ML's published text.

Source

“Plugin4Shell attack affects all the major coding agents, researchers…”
The Register AI + ML, 17 Sept 2026, 22:42.

Reporting from a publisher outside the organisation being covered.

Read original story ↗