A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.
By Anirban Ghoshal
Sep 18, 2026 6 mins
Code EditorsDevelopment ToolsVulnerabilities