OpenCode < 1.0.216 - Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying serve...

CVE-2026-22812

🔐 CVE-2026-22812 - OpenCode 未认证 HTTP 服务器 → 远程代码执行 RCE CVE-2026-22812 的安全公告、技术分析、检测指南与缓解说明 📌 概述 CVE-2026-22812 是一个影响 早于1.0.216 版本的 OpenCode 的高危远程代码执行 RCE 漏洞 。 问题在于 OpenCode 会自动启动一个未认证的本地 HTTP 服务器 ，以下来源均可访问它： 本地恶意进程 通过宽松 CORS 策略访问的浏览器标签页 被注入的 Web 内容 localhost 跨源请求 攻击者可借此以当前用户的权限执行任意 shell 命令 🚨 严重程度...

EUVD-2026-75579

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

CVE-2026-88899

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. This allows remote, unauthenticated attackers to supply arbitrary directory paths, enabling file operations outside the project root on the host system. The vulnera...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 - 用于扫描 OpenCode 未认证 RCE 的 Nuclei 模板。 burp suite 请求 root@kitploit: POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 root@kitploit: POST /session/"id"/shell HTTP/1.1 Host: target.com...

opencode-secure

The open source AI coding agent. Installation root@kitploit: YOLO curl -fsSL https://opencode.ai/install | bash Package managers npm i -g opencode-ai@latest or bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS and Linux...

CVE-2026-22812-OpenCode-RCE-exp

CVE-2026-22812-OpenCode-RCE-exp 使用方法： java -jar xxx.jar 环境推荐： jdk8...

PT-2026-89477

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

CVE-2026-22812-exploit

CVE-2026-22812 漏洞利用工具 针对 CVE-2026-22812（OpenCode 未认证远程代码执行漏洞）的全功能利用工具包 🎯 概述 CVE-2026-22812 漏洞利用工具是一个针对 OpenCode 未认证远程代码执行漏洞的综合性利用框架。该工具提供多种利用方法，包括交互式 Shell、文件操作和系统信息枚举。 漏洞详情 CVE 编号 ：CVE-2026-22812 受影响版本 ：OpenCode 1.0.216 CVSS 评分 ：8.8（高危） 攻击向量 ：网络 认证要求 ：无需认证 影响范围 ：系统完全沦陷 ✨ 功能特性 🔓 利用能力 ✅ 未认证会话创建 ✅...

CVE-2026-22812

CVE-2026-22812 Descripción general Una herramienta de explotación en Python para la vulnerabilidad de Ejecución Remota de Código RCE en OpenCode que afecta a versiones v1.0.216. Esta herramienta proporciona múltiples vectores de ataque, incluida la ejecución de comandos, lectura/escritura de...

CVE-2026-22812-POC

Explotador OpenCode CVE-2026-22812 Herramientas Python simples para verificar y explotar la vulnerabilidad de OpenCode CVE-2026-22812. Instalación root@kitploit: git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse...

opencode

オープンソースのAIコーディングエージェント。 English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt インストール root@kitploit: YOLO curl -fsSL...

OpenCode Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability that can allow a remote attacker to obtain a session identifier and execute arbitrary commands through the session shell endpoint. This proof of concept retrieves an available session and demonstrate...

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

Security flaws in agent infrastructure from Amazon Web Services AWS, Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompts, content filters,...

Malicious code in opencode-engos-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42180a034d43d3c6d16e223fe6fcd93f6e403f0c73c763e9b21b6aded0545274 On npm install, postinstall.mjs enumerates platform-specific sibling package names of the form opencode-engos---baseline-musl, resolves each to the...

CVE-2026-69110

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...

EUVD-2026-52743

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...