A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer's own access. Anomaly, the company behind OpenCode, fixed the... Weiterlesen: OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In …
Intelligence View
⚡ tsecurity.de Intelligence
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
19 Quellen
Security: Mehrere Probleme in perl-CLI-Simple (Fedora)
18 weitere Quellen
PPro-Linuxvor 5 Std.Security: Mehrere Probleme in perl-HTML-Query (Fedora) PPro-Linuxvor 5 Std.Security: Mehrere Probleme in perl-Text-Markdown-Discount (Fedora) PPro-Linuxvor 5 Std.Security: Mehrere Probleme in perl-Encoding-FixLatin (Fedora) PPro-Linuxvor 5 Std.Security: Mehrere Probleme in rt (Fedora) PPro-Linuxvor 5 Std.Security: Mehrere Probleme in perl-Badger (Fedora) PPro-Linuxvor 5 Std.Security: Mehrere Probleme in perl-CSS-Inliner (Fedora)
+12
17 Quellen
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
16 weitere Quellen
VVulDB Updatesvor 10 Std.CVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444) VVulDB Updatesvor 10 Std.CVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444) VVulDB Updatesvor 9 Std.CVE-2026-90095 | Linux Kernel FUSE fuse_uring_cmd deadlock (WID-SEC-2026-3444)
+10
8 Quellen
CVE-2025-10536 | Mozilla Firefox up to 142 information disclosure (Nessus ID 265350 / WID-SEC-2025-2074)
7 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2025-10532 | Mozilla Firefox up to 142 unusual condition (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10529 | Mozilla Firefox up to 142 cross-domain policy (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10533 | Mozilla Firefox up to 142 integer overflow (Nessus ID 265350 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10527 | Mozilla Firefox up to 142 use after free (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 3 Std.CVE-2025-10528 | Mozilla Firefox up to 142 protection mechanism (Nessus ID 265341 / WID-SEC-2025-2074) VVulDB Updatesvor 10 Std.CVE-2026-90094 | Linux Kernel up to 6.18.51/7.2.5 arm64 information disclosure (WID-SEC-2026-3444)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4289747/it-security-nachrichten/opencode-flaw-lets-malicious-mcp-servers-execute-code-during-sign-in-on-windows-and-wsl/