News
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In
A vulnerability in the OpenCode AI coding agent allowed malicious or hijacked MCP servers to run code on a developer's Windows or WSL machine when the developer signed in.
News
A vulnerability in the OpenCode AI coding agent allowed malicious or hijacked MCP servers to run code on a developer's Windows or WSL machine when the developer signed in.