// Google CloudHIGH
Plugin4Shell vulnerability disclosed affecting Google Gemini CLI and other AI coding agents. The flaw allows zero-click remote code execution through Git reference name ambiguity in plugin resolution, enabling attackers to replace pinned, trusted plugins with malicious code. Google stated it will not patch the deprecated Gemini CLI, advising users to migrate away from it.
// Get alerts for Google Cloud