CVE-2026-22812

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

State: Published
Severity: 8.8 High
Published: Jan 12, 2026
Updated: Jan 13, 2026
Reserved: Jan 9, 2026

Description

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-306 Missing Authentication for Critical Function
CWE-749 Exposed Dangerous Method or Function
CWE-942 Permissive Cross-domain Policy with Untrusted Domains

Affected Products

Product	Versions
opencodeanomalyco	< 1.0.216Affected

References

https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.