news.mlab.sh
Back to the feed
vulnerability

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

Published · Updated · Source: The Hacker News · [email protected] (The Hacker News)
HighCVSS 9.6EPSS 77%
Image: The Hacker News
Summary

A critical vulnerability in OpenCode allows malicious MCP servers to execute code on a developer's Windows or WSL machine during sign-in. Users are advised to upgrade to version 1.18.33 or remove unvetted remote MCP servers.

Read the full article at The Hacker News
Add news.mlab.sh as a preferred source on Google

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.