CVE-2026-22812

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

Affected

anomalyco · opencode

CVSS v3.1 GITHUB

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

16.54% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high · CWE-306

Published

2026-01-12

Updated

2026-01-13

Proof-of-concept exploits (8)

• advisories/GHSA-vxw4-wv6m-9hhh
• rohmatariow/CVE-2026-22812-exploit34★ · 2026-01-16
• 0xgh057r3c0n/CVE-2026-228122★ · 2026-01-19
• mad12wader/CVE-2026-228120★ · 2026-01-18
• CayberMods/CVE-2026-22812-POC1★ · 2026-01-20
• Udyz/CVE-2026-22812-Exp1★ · 2026-09-26
• 0xBlackash/CVE-2026-228121★ · 2026-04-06
• Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp1★ · 2026-04-27

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22812.yaml

Security advisories

• anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh

References

• CVE Record
• NVD entry

Related

• CVE-2025-13486
• CVE-2025-25257
• CVE-2025-2775
• CVE-2025-2776
• CVE-2025-2777
• CVE-2025-3102