// GeminiCRITICAL
Plugin4Shell, disclosed September 17, 2026, is a zero-click remote code execution vulnerability in AI coding agents' plugin installation mechanisms. The flaw bypasses SHA-pinning verification: agents check out pinned plugin commits but never verify the downloaded code matches. Google's Gemini CLI is among four affected agents. Google's response is to deprecate Gemini CLI rather than issue a patch. Anthropic and OpenAI released fixes for Claude Code and Codex; GitHub Copilot remains unfixed. No CVE has been assigned.
// Get alerts for Gemini