CVE-2026-22812

🔐 CVE-2026-22812 - OpenCode Unauthenticated HTTP Server → Remote Code Execution RCE Security advisory, technical analysis, detection guidance, and mitigation notes for CVE-2026-22812 📌 Overview CVE-2026-22812 is a high-severity Remote Code Execution RCE vulnerability affecting OpenCode versions...

OpenCode < 1.0.216 - Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying serve...

opencode-secure

The open source AI coding agent. Installation YOLO curl -fsSL https://opencode.ai/install | bash Package managers npm i -g opencode-ai@latest or bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS and Linux recommended, always up t...

CVE-2026-22812-exploit

CVE-2026-22812 Exploit Tool Full-featured exploitation toolkit for CVE-2026-22812 - OpenCode Unauthenticated RCE 🎯 Overview CVE-2026-22812 Exploit Tool is a comprehensive exploitation framework for the OpenCode unauthenticated remote code execution vulnerability. This tool provides multiple...

CVE-2026-22812

CVE-2026-22812 Overview A Python exploitation tool for OpenCode Remote Code Execution RCE vulnerability affecting versions v1.0.216. This tool provides multiple attack vectors including command execution, file read/write, file upload/download, and interactive shell. Disclaimer ⚠️ FOR AUTHORIZED...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 - OpenCode Unauthenticated RCE Nuclei template for scan. burp suite request POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 POST /session/"id"/shell HTTP/1.1 Host: target.com User-Agent...

CVE-2026-22812-OpenCode-RCE-exp

CVE-2026-22812-OpenCode-RCE-exp Usage: java -jar xxx.jar Recommended environment: jdk8...

CVE-2026-22812-POC

OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic Usage Check...

opencode-skills

OpenCode Skills A production-grade skill pack for OpenCode...

CVE-2026-88899

CVE-2026-88899 - Knowns 0.30.0 Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem Overview An improper authorization and header-spoofing vulnerability was reported regarding Knowns' reverse proxy for an embedded OpenCode AI agent daemon...

Malicious Package

Overview opencode-skills-collection is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-18193 Malicious code in opencode-skills-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941 Package bundles a collection of skill directories containing various helper scripts. Static pattern matches fired on routine network primitives: a...

Malicious code in opencode-skills-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941 Package bundles a collection of skill directories containing various helper scripts. Static pattern matches fired on routine network primitives: a...

Malware in opencode-skills-collection

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell audit — lab deliverable This repository contains a...

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP Model Context Protocol servers to add outside tools, and such code would run with the developer's own access...

loki-skill

Loki — навык для автономного пентеста Навык для Hermes Agent:...

Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents

Coding agents that run long enough must compact their context, summarizing the conversation, discarding the original, and carrying the summary forward as memory. We show that in popular open-source coding agents this step is an exploitable trust boundary. Harnesses that flatten the typed...

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key...

WS-2026-0171

OpenCode 1.0.137 through 1.18.32 and 2.0.0 through 2.0.17 pass the OAuth authorization URL returned by a remote MCP server to the 'open' package 10.1.2 without validation. On Windows and WSL, 'open' 10.1.2 embeds the URL unescaped in a PowerShell command, so a malicious or compromised MCP server...