OpenCode 存在任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.bx33661.com/blog/opencode-vulnerability-analysis/
• https://cn-sec.com/archives/5219406.html
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/ai/OpenCode-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2026-22812.md
• https://cy.md/opencode-rce/
• https://nvd.nist.gov/vuln/detail/CVE-2026-22812
• https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh
• https://www.bx33661.com/tags/opencode/
• https://github.com/anomalyco/opencode/issues/6355

Related Vulnerabilities

• PoCunauthenticated-opencode-web: OpenCode Web - Unauthenticated Access
• OpenCode网页存在未授权访问
• OpenCode /file/content 文件读取漏洞
• PoCCVE-2026-22812: OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
• OpenCode /session 代码执行漏洞（CVE-2026-22812）
• OpenCode AI远程命令执行漏洞（CVE-2026-22812）