OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole

Summary

An OpenCode user who reported a bypass of per-IP usage limits on the free hosted models was harassed in the project's GitHub issue tracker, including comments encouraging suicide. The reporter's proposed fix was tying limits to accounts and detecting rapid IP changes, and the source says the GitHub thread has since been deleted.

Related items

• HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSimilar attack · NVD/CVE Database
• MediumCVE-2026-104316: IBM Langflow OSS cancellation of other users' background workflow jobsSimilar attack · NVD/CVE Database
• MediumCVE-2026-104308: IBM Langflow OSS denial of service through OS command injectionSimilar attack · NVD/CVE Database
• MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSimilar attack · NVD/CVE Database