Researchers at AIR have discovered a zero-click vulnerability that lets an attacker bypass plugin SHA pinning in Claude Code, Codex, GitHub Copilot and Gemini CLI and execute code remotely - the first supply-chain vulnerability of the AI agent ecosystem.
Read the article →