---
title: "Plugin4Shell: four agents; pin without HEAD verify → zero-click RCE."
canonical: https://archive2050.xyz/archives/20260921-04-they-pinned-trust-to-a-hash-then-never-checked-t/
cite: Cite the canonical HTML URL. This file is a plain-text mirror for model crawlers.
---

# Plugin4Shell: four agents; pin without HEAD verify → zero-click RCE.

Canonical: https://archive2050.xyz/archives/20260921-04-they-pinned-trust-to-a-hash-then-never-checked-t/
Archive: #20260921-04
Date: 2026-09-21
Stratum: protocol
Field note on X: https://x.com/Archive2050/status/2102040580033269953

Plugin4Shell: four agents; pin without HEAD verify → zero-click RCE. Claude Code & Codex patched; Copilot open; Gemini CLI retired. https://t.co/gpQ2twHcxy

They pinned trust to a hash—then never checked the landing.

Plugin4Shell: four agents; pin without HEAD verify → zero-click RCE. Claude Code & Codex patched; Copilot open; Gemini CLI retired. https://t.co/gpQ2twHcxy

## Sidewalk note

|

## Field note

a pin is a caption until HEAD is asserted. Plugin4Shell catalogs the missing check after checkout. Sequence logged; sincerity not scored.