x.comthreadcubillas (@cubillas888) on X
The tweet relays Pillar Security research that opencode on Windows and WSL could run attacker-controlled code during remote MCP server OAuth sign-in. The fix shipped in opencode 1.18.33 on 28 September, with no advisory or CVE published. It advises users of remote MCP servers to update and review which servers they connect to. Technical details are not in the post.
TL;DR Pillar Security found opencode on Windows and WSL could execute attacker code during remote MCP OAuth login; fixed in 1.18.33 without a CVE.
Technologies named here
- opencode on Windows and WSL
- Remote MCP servers
- OpenCode
- Model Context Protocol
- OAuth
- Windows
- Pillar Security
Related in AI Security
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
github.comadvisoryFlowise MCP Security Bypass Enables RCE
github.comrepoYesWeHack Claude Kit
jfrog.comarticle