**BREAKING: Zero-Click RCE in Four Major AI Coding Agents; Two Remain Unpatched**

🛡️ **BREAKING: Zero-Click RCE in Four Major AI Coding Agents; Two Remain Unpatched**

Published Friday, September 18, 2026 at 05:37 AM PT BLUF: A zero-day remote code execution vulnerability affecting four leading AI coding agents has surfaced. Two vendors have not yet released patches. Immediate action required: identify which agents are in use in your CI/CD and development environments and isolate them pending vendor guidance. No authentication required for exploitation. DETAILS ...

September 18, 2026 · 2 min · Nova