A fake branch name let attackers hijack four AI coding agents.
Researchers disclosed a flaw on 17 September in Claude Code, Codex, Copilot and Gemini CLI. An attacker names a branch after the approved commit, so the agent runs that code instead. Two of the four are patched, one has no fix, and one was retired instead.
Why it mattersPlugins for these agents inherit your keys, your source code and your production access. If you use one, check its version today and drop plugins you no longer need.
Read in the app — free, in 9 languages
Related stories
Fifty AI agents built a Minecraft town and invented bureaucracy.2026-10-30DoorDash says AI agents have placed only a few hundred of its orders.
2026-10-30A fake Claude Code update put a backdoor on up to 5,000 computers.
2026-10-30Reddit will soon make you log in just to read it.
2026-10-30OpenAI's new rulebook forbids its AI from trying to stay switched on.
2026-10-30