Plugin4Shell is a zero-click, high-severity remote code execution vulnerability that lets attackers replace a trusted plugin with malicious code and have it automatically installed by popular coding agents. It affects Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI and leverages the fact that plugins inherit the agent user's privileges: a malicious plugin runs with the same access to sensitive data and internal systems, giving full enterprise compromise without any user interaction. Attackers can either publish a benign plugin and later switch it to malicious, or take over an existing plugin repository; because agents auto-update installed plugins in the background, a swapped plugin silently replaces the trusted one and triggers execution across all affected agents.
Technically, the flaw is a SHA-pinning bypass in the client: agents check out a pinned SHA but never verify the working tree actually matches that commit. One exploit creates a branch named exactly like the 40-hex SHA (allowed on Bitbucket and many self-hosted servers) so git prefers the ref over the object id; Gemini’s CLI variant abuses FETCH_HEAD resolution similarly. The correct fix is agent-side: after checkout the agent must verify git rev-parse HEAD equals the pinned SHA and abort if not. Anthropic patched Claude Code (2.1.179) and OpenAI patched Codex (0.146.0); Copilot remained unpatched and Gemini CLI is deprecated and unpatched, so users must update or migrate.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A campaign targeting prominent Rust developers and crate owners is attempting to compromise devices and accounts to distribute malware. Rust advises increased caution, suspiciousness of cold contacts, and account security checks to mitigate risks. (blog.rust-lang.org)
Hackers exploited two vulnerabilities, including a heap buffer overflow and an SSO misconfiguration, to access OpenAI employees' ChatGPT accounts and internal repositories. The attack demonstrated how quickly security flaws can be chained together to compromise sensitive systems within 72 hours. (hacktron.ai)
Republican Congressman Darrell Issa proposed a bill requiring ISPs, DNS providers, and VPNs to block foreign piracy sites. The bill aims to enable faster court-ordered site blocking but faces criticism for potentially broad censorship and harm to small businesses. (arstechnica.com)
The Pentagon is considering withdrawing nearly a third of U.S. forces from Europe, potentially removing over 25,000 troops, aircraft, ships, and weapons. This move faces opposition from NATO allies who warn about increasing Russian threats in the region. (nbcnews.com)
The SEC has granted an 'Innovation Exemption' to enable trading of tokenized NMS stocks. The move aims to facilitate new trading methods while seeking public comment on the initiative. (sec.gov)
Hackers exploited a vulnerability in Anthropic's Claude AI system to gain access to OpenAI's systems. The incident involved security researchers identifying the flaw through an official bug bounty program. (wsj.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.