Single-cell RNA-seq and functional assays of human blood and tonsil CD4+ T cells, plus a mouse viral infection model, identify a CTLA4-restrained cytotoxic CD4+ subset (CD4cyt) that is expanded in primary antibody deficiency and CTLA4 haploinsufficiency.