Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution vulnerability ... Published: 2026-09-18