CVE-2026-22812
1 advisory.
npm/opencode-ai CVE-2026-22812: high 8.8
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
Action: Upgrade opencode-ai to 1.0.216 or later.
npm i opencode-ai@1.0.216Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.216 | - |
Fixed versions
| 1.0.216 |
Sources
- osv: GHSA-vxw4-wv6m-9hhh
- https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh
- https://nvd.nist.gov/vuln/detail/CVE-2026-22812
- https://github.com/anomalyco/opencode/commit/7d2d87fa2c44e32314015980bb4e59a9386e858c
- https://github.com/anomalyco/opencode
CVE-2026-22812 · published · modified · JSON