High severity · published Jan 12, 2026
CVE-2026-22812
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
8.8
CVSS
16.5%
EPSS
No
On KEV
Description
OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)16.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
opencode · anomalyco
< 1.0.216 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-22812
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-22812
Exploit
https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh
More from opencode
7.5
CVE-2026-119025
open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
6.1
CVE-2026-22813
Malicious website can execute commands on the local system through XSS in the OpenCode web UI