anomalyco

Products

ProductCVEsExploitedLatest
opencode3–Oct 29, 2026

Exploited and recent CVEs

  • CVE-2026-119025 High 7.5 open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows 1.4%
  • CVE-2026-22813 Critical 9.4 Malicious website can execute commands on the local system through XSS in the OpenCode web UI 0.9%
  • CVE-2026-22812 High 8.8 OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution 16.5%