Skip to content

News / Archive

News

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In

A vulnerability in the OpenCode AI coding agent allowed malicious or hijacked MCP servers to run code on a developer's Windows or WSL machine when the developer signed in.

More News