tag

Unauthenticated-Api

OpenCode Unauthenticated Local HTTP Server -> Remote Code Execution (CVE-2026-22812)

CVE-2026-22812 (GHSA-vxw4-wv6m-9hhh)· OpenCode (AI developer/coding agent tool) local HTTP server patched