Critical flaw hits Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI

Sep 21, 2026 · Issue 8 · 18 sources, 25 articles

Earlier this week, 25 articles reported a critical flaw affecting four leading AI coding tools: Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI. The available excerpt does not give the technical details of the flaw.

Who is affected and how

tech lead

Agree with the team on how the affected tools are used until the state of the fixes is clear.

CTO

Ask for a risk assessment of the enterprise use of the affected tools.

senior developer

Update the tools and check which repositories and secrets the agent can access.

Narrative: The coding agent is the new attack surface

Sources

• Critical flaw in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLIheise online · Sep 21, 2026
• Plugin4Shell zero-click flaw hits Claude Code, Codex, Copilot and Gemini CLIpasquale pillitteri · Sep 21, 2026
• Critical flaw in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI | heise onlineheise.de · Sep 21, 2026
• Claude Opus 5.5 is now available in GitHub Copilotthe github blog · Sep 22, 2026
• Claude Opus 5.5 is now available in GitHub Copilot - GitHub Changeloggithub.blog · Sep 22, 2026
• Claude Code vs. Gemini Spark: How Do They Compare?built in · Sep 23, 2026
• Claude Code vs. Gemini Spark: How Do They Compare? | Built Inbuiltin.com · Sep 23, 2026
• 5 Best Claude Code Alternatives for 2026: Codex, Copilot and Moretechrepublic · Sep 24, 2026

Machine-generated summary based on the titles and excerpts of the source articles. The facts come from the linked article.