{"data":{"id":"a922ad5e-2e45-407c-ba71-66c96acbac3d","title":"OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL","summary":"Anomaly's OpenCode AI coding agent on Windows and WSL passed a server-supplied OAuth authorization endpoint to a browser helper that built an unescaped PowerShell command, so a malicious or hijacked remote MCP server could run code during the developer's sign-in. Anomaly fixed it in version 1.18.33 on September 28 without requesting a CVE or publishing an advisory, and Pillar Security, which disclosed it on October 19, rates it critical at 9.8 out of 10.","solution":"Upgrade to OpenCode 1.18.33 or later. If you cannot upgrade yet, remove any remote MCP servers you have not vetted from your OpenCode configuration. Run opencode mcp list to see which servers are configured.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html","publishedAt":"2026-10-22T10:44:05.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenCode","MCP (Model Context Protocol)","Anomaly"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-22T10:44:05.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0010"]}}