A zero-click RCE flaw in AI coding agents could have exposed enterprise systems

By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.

Published: 2026-09-18