Severity: CriticalVulnerabilityMCP/tool abuse
OpenCode MCP Server Integration Flaw Enables Arbitrary Code Execution During Authentication
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
A vulnerability in OpenCode allowed a malicious or compromised MCP server to execute arbitrary code on a developer's Windows or WSL system at sign-in time, inheriting the developer's access permissions. The flaw was patched by Anomaly in version 1.18.33.
What to do
Immediately update OpenCode to version 1.18.33 or later and audit MCP server connections for unauthorized or suspicious entries.
Mapped framework pillars
Sources
#MCP#code execution#supply chain#developer tools#authentication#Windows