Description
攻击者可以利用该漏执行任意命令，进而控制整个服务器。
OpenCode AI远程命令执行漏洞（CVE-2026-22812）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/ai/OpenCode-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2026-22812.md
https://www.bx33661.com/blog/opencode-vulnerability-analysis/
https://download.csdn.net/blog/column/12769155/158008049
https://cloud.tencent.com/developer/article/2651937
https://nvd.nist.gov/vuln/detail/CVE-2026-22812
https://medium.com/@dhxrxx/cve-2026-22812-how-i-got-rce-on-a-71k-star-ai-coding-tool-with-zero-authentication-7524fbc3317f
https://www.cve.org/CVERecord?id=CVE-2026-22812
https://cn-sec.com/archives/4916792.html