---
title: "Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched"
date: 2026-09-18
source: http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6aad04fd76764a1bb522955c3525d316&url=https%3a%2f%2fwww.helpnetsecurity.com%2f2026%2f09%2f18%2fplugin4shell-ai-coding-agents-vulnerability%2f&c=13135201289487942412&mkt=en-us
description: "Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution vulnerability ..."
---

# Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution vulnerability ...

*Published: 2026-09-18*