Anomaly

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

A critical vulnerability in OpenCode allows malicious MCP servers to execute code on a developer's Windows or WSL machine during sign-in. Users are advised to upgrade to version 1.18.33 or remove unvetted remote MCP serv…