8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22812

CVE-2026-22812: OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22812

CVE-2026-22812:

8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
opencode-ai	npm	< 1.0.216	1.0.216

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in an unauthenticated HTTP server in OpenCode that exposes dangerous endpoints. The provided description clearly identifies the vulnerable endpoints (/session/:id/shell, /pty, /file/content) and the file where the server is defined (server.ts). The patch, located in packages/opencode/src/server/server.ts, modifies the Cross-Origin Resource Sharing (CORS) policy from a permissive .use(cors()) to a more restrictive one. This change occurs within the server's initialization logic, which is encapsulated within the Server.listen function as indicated by the call Server.listen() in cli/cmd/tui/worker.ts. Although the patch doesn't show the route handlers themselves, the Server.listen function is the entry point that configures and starts the server, making it the primary function responsible for exposing the vulnerable endpoints. The vulnerability is a combination of the lack of authentication and the permissive CORS policy, both of which are configured within the scope of the server's startup process.

Vulnerable functions

Server.listen

packages/opencode/src/server/server.ts

This function starts an HTTP server with unauthenticated endpoints that allow arbitrary command execution, file reading, and interactive terminal sessions. The vulnerability is caused by the lack of authentication and the permissive CORS policy, which allows any website to exploit these endpoints. The patch attempts to mitigate this by restricting the allowed origins for CORS requests, but the underlying unauthenticated endpoints remain.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.