3 ms·OpenCode AI coding agent hit by critical unauthenticated RCE vulnerability3 points by AlexAltea 9mo agorvz 9mo agoProbably nothing.AlexAltea 9mo agoProbably nothing based on what? I have reproduced the finding locally... Any website can trivially run arbitrary code as the current user if OpenCode is installed; that's CVSS ~10.