Two vulnerabilities leading to unauthenticated remote code execution, for which even the Japanese Prime Minister called for ...
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model ...