CVE-2026-22812

High

Published: 12/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

OpenCode, an open source AI coding agent, prior to version 1.0.216 automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in version 1.0.216.

Risk Assessment

An attacker can remotely execute commands on the user's machine, leading to full compromise of the system and data.

Recommendation

It is recommended to immediately update OpenCode to version 1.0.216 or later.

Other vulnerabilities in OpenCode

CVE-2026-88624Critical
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

Original NVD description (English source)

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS