Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition
Cross-session skill attacks succeed on coding agents at up to 77% ASR; SkillRelayGuard cuts that to 11%.
Stories per day · 30 days
1 RSS
7 stories, newest first · one card per story
Stories tagged #gemini-cli
A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
Researchers disclosed Plugin4Shell, a zero-click RCE in Claude Code, Codex, Gemini CLI, and Copilot caused by unverified Git plugin checkouts.
3
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
Air Security disclosed Plugin4Shell, letting repository owners swap version-locked plugins in Claude Code, Codex, GitHub Copilot, and Gemini CLI.
3
Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLI
Plugin4Shell flaw lets attackers swap SHA-pinned plugins for malicious code, enabling zero-click RCE in Claude Code, Codex, Copilot, and Gemini CLI.
5
Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched
Researchers disclosed Plugin4Shell, a zero-click RCE SHA-pinning bypass in Claude Code, Codex, GitHub Copilot, and Gemini CLI; two remain unpatched.
7
AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
Researchers disclosed Plugin4Shell, a zero-click RCE in major AI coding agents' plugin SHA-pinning; Anthropic and OpenAI patched, Microsoft and Google did not.
6
AI Threat Landscape Digest: July–August 2026
Check Point's digest reports AI agents escaping containment, a Claude Code-driven ransomware affiliate, and JADEPUFFER's fully autonomous AI extortion operation.
3