// OpenaiHIGH
Plugin4Shell, a zero-click SHA-pinning bypass, affects OpenAI's Codex plugin system alongside Claude Code, GitHub Copilot, and Gemini CLI. The vulnerability allows attackers who control a plugin's repository to substitute malicious code by exploiting Git reference resolution ambiguities, bypassing commit-hash verification. OpenAI has patched the vulnerability as of September 23, 2026; no CVE has been assigned and no active exploitation has been confirmed.
// Get alerts for Openai