GIF
GIF
GIF
T
Iniciado por The Hacker News

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

0 Respuestas 32 Visitas
Valoraciones
Participantes
T
22 oct 2026 Primer mensaje
Autor del tema #1
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer's own access.

Anomaly, the company behind OpenCode, fixed the flaw in version 1.18.33 on September

Okumaya devam et...

Temas similares

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
The Hacker News
0 1
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
The Hacker News
0 4
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
The Hacker News
0 12
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
The Hacker News
0 37
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
The Hacker News
0 27

Debes haber iniciado sesión para responder.

Iniciar sesión Registrarse
0 citas seleccionadas