vendors:Anomaly × criticity:high × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · há 11h high

OpenCode silently patched critical RCE in MCP OAuth flow on Windows/WSL (v1.0.137-1.18.32), no CVE issued

Pillar Security researcher Eilon Cohen disclosed on October 19 a critical remote code execution flaw in the open-source agentic AI coding tool OpenCode (developed by Anomaly), affecting versions 1.0.137 to 1.18.32 on Windows and WSL. A malicious remote MCP server can execute arbitrary code on a developer's machine during the MCP OAuth aut…

technology software development

infosecurity-magazine.com · há 11h high

OpenCode Console breach via legacy system may expose OpenAI, Anthropic and Google API keys

OpenCode, the open-source AI agent framework developed by Anomaly, confirmed on October 17 a security breach that occurred the night before and affected its Console service. Console stores each workspace's third-party AI provider credentials centrally. About 1.4% of Console users, those with external providers linked, may have had OpenAI,…

technology software development