PRODUCT PROFILE

opencode

Created from vulnerability 17767 relation agent

关联漏洞

共找到 2 条公开漏洞记录

中危2026/06/25

OpenCode Web - Unauthenticated Access

Unauthenticated network access to the OpenCode web interface was detected. When the OpenCode web server is started without setting the OPENCODE_SERVER_PASSWORD environment variable, the server is completely unsecured.

opencodePoC 已收录

CVSS—

高危CVE-2026-228122026/01/12

OpenCode < 1.0.216 - Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying server.

opencodePoC 已收录

CVSS8.8