OpenCode Flaw Allows Malicious MCP Servers to Execute Code

# OpenCode Flaw Allows Malicious MCP Servers to Execute Code

https://gcdradar.vercel.app/incidents/opencode-flaw-allows-malicious-mcp-servers-to-execute-code · AIR-2026-1468 · closed 2026-11-05

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-10-22 (happened 2026-09)
- AI role: Attack on AI
- Products: OpenCode

## Summary

A vulnerability in the OpenCode AI coding agent enabled malicious Model Context Protocol servers to execute arbitrary code on developer machines during sign-in. The vendor resolved the issue in version 1.18.33.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-22: OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL (https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html)

## Sources

- 2026-10-22 The Hacker News: OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.