References https://www.reddit.com/r/LocalLLaMA/comments/1r8oehn/opencode_arbitrary_code_execution_major_security/ https://news.ycombinator.com/item?id=46581095 https://www.reddit.com/r/opencodeCLI/comments/1qadc07/remote_code_execution_in_opencode_update_now/ https://github.com/anomalyco/opencode/issues/8676 https://opencode.ai/docs/zh-cn/troubleshooting/ https://www.4hou.com/posts/yzQ6 https://github.com/Threekiii/Awesome-POC https://post.smzdm.com/p/arz950oq https://github.com/anomalyco/opencode/issues/12846
Related VulnerabilitiesPoCunauthenticated-opencode-web: OpenCode Web - Unauthenticated AccessOpenCode 存在任意文件读取漏洞OpenCode /file/content 文件读取漏洞PoCCVE-2026-22812: OpenCode < 1.0.216 - Unauthenticated Remote Code ExecutionOpenCode /session 代码执行漏洞(CVE-2026-22812)OpenCode AI远程命令执行漏洞(CVE-2026-22812)