Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-22812
8.8
HIGHCVSS v3
Published
January 12, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.
GitHub