OpenCode Web Interface Flaw Let Hostile Sites Run Commands on Developer PCs

29 September 2026  |  dark6  |  Vulnerability

A flaw in OpenCode’s local web interface allowed a malicious website to turn an upgrade request into code execution on a developer machine. Version 1.18.22 fixes both the...

>> read more