Plugin4Shell flaw: Code agents vulnerable to attacks

A critical flaw, Plugin4Shell, affects Claude, OpenAI Codex, and GitHub Copilot.

Published 1h1 sourceImportant

≈ 15sSpeed

The fact

Code agents automatically execute malicious downloaded code.

Anthropic and OpenAI have patched the issue, but GitHub has not responded.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 21, 2026