<![CDATA[OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL]]>A vulnerability in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to execute code on a developer's Windows or WSL machine at sign-in time. OpenCode connects to MCP (Model Context Protocol) servers to extend its capabilities with external tools, and any code executed through this path would run with the developer's own access privileges.

Anomaly, the company behind OpenCode, addressed the issue in version 1.18.33, released in September.

Key points:

  • The flaw could be triggered when a developer signed in to OpenCode.
  • Exploitation required a malicious or compromised MCP server.
  • Code execution occurred on Windows and WSL systems with the developer's permissions.
  • The fix shipped in OpenCode 1.18.33.

Developers using OpenCode should upgrade to 1.18.33 or later and review the MCP servers configured in their environments.

Source: The Hacker News

Have you audited which MCP servers your team's OpenCode installs are connected to?

]]>https://xploitlk.com/topic/784/opencode-flaw-lets-malicious-mcp-servers-execute-code-during-sign-in-on-windows-and-wslRSS for NodeTue, 27 Oct 2026 07:24:53 GMTSun, 25 Oct 2026 06:30:18 GMT60