https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:13:15.669412+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22812 CVE-2026-22812 — OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution 2026-10-08T12:13:15.671148+00:00

Affected: anomalyco opencode

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.