A fake branch name let attackers hijack four AI coding agents.
Researchers disclosed a flaw on 17 September in Claude Code, Codex, Copilot and Gemini CLI. An attacker names a branch after the approved commit, so the agent runs that code instead. Two of the four are patched, one has no fix, and one was retired instead.
Why it mattersPlugins for these agents inherit your keys, your source code and your production access. If you use one, check its version today and drop plugins you no longer need.
Read in the app — free, in 9 languages
Related stories
A free coding app quietly uploaded 42,000 files from one laptop.2026-09-20A web developer used AI agents to settle a 50-year-old conjecture.
2026-09-20China Telecom's new open model fits on a gaming graphics card.
2026-09-20Claude Code will now follow the instruction file its rivals use.
2026-09-19Claude now makes editable documents and slide decks inside your chat.
2026-09-19