Tag: malicious mcp servers

1 article

Developer workstation with laptop code display on cluttered desk in office setting.

OpenCode Flaw Enables Code Execution via Malicious MCP Servers

A critical flaw in OpenCode's MCP sign-in flow, rated 9.8/10 in severity, allows malicious MCP servers to execute code, posing a significant threat to users. This vulnerability was privately reported on August 29 and publicly disclosed on October 19, with a fix released in version 1.18.33 on September 28.

Analyst 207