CVE-2026-22812-Exp

CVE-2026-22812-Exp CVE-2026-22812...

OpenCode Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability that can allow a remote attacker to obtain a session identifier and execute arbitrary commands through the session shell endpoint. This proof of concept retrieves an available session and demonstrate...

Exploit for CVE-2026-22812

README.md OpenCode CVE-2026-22812 Exploiter Simple Python tool...

agentdex (>=0.1.0, <=0.3.7) potentially affected by CVE-2026-22812 via opencode-ai (1.0.123)

opencode-ai NPM version 1.0.123 is affected by a known vulnerability. The following packages have a transitive dependency on opencode-ai and may be impacted: - agentdex =0.1.0, =0.3.7 Source cves: CVE-2026-22812 Source advisory: OSV:GHSA-VXW4-WV6M-9HHH...

CVE-2026-22812

creationtimestamp| type| source ---|---|--- 2026-01-12 19:43:04+00:00| published-proof-of-concept| https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh 2026-01-12 23:57:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbalrza2w2v 2026-01-13...