Do Son Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.
Zero-Click RCE
Oligo reveals AirBorne flaws in Apple AirPlay protocol enabling zero-click wormable RCE across billions of Apple, CarPlay, and IoT devices.