Threat
OpenCode MCP RCE Flaw 2026: Malicious Servers Execute Code on Windows & WSL
First reported · Discovered aviatrix.ai
Page published
Earliest dated coverage: 22 Oct 2026 · First observed: 6 Nov 2026 · Latest dated coverage: 22 Oct 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
OpenCode’s MCP authentication flow could turn a compromised integration into code execution with developer privileges, exposing credentials and source code while the reported lack of a CVE complicates vulnerability tracking.
An OpenCode command-injection flaw allowed a malicious or compromised MCP server to supply an OAuth authorization URL that triggered arbitrary PowerShell execution on Windows or WSL during sign-in. The report identifies versions 1.0.137–1.18.32 as affected and version 1.18.33 as patched, without a CVE assignment or public advisory.