Windows and Windows Subsystem for Linux users running OpenCode 1.0.137–1.18.32 need to check their version directly and update to 1.18.33 or later, released on September 28.
Developers using OpenCode, Anomaly’s AI coding agent, on Windows or Windows Subsystem for Linux (WSL) should check whether they have installed its September security fix. The Hacker News reports that versions 1.0.137–1.18.32 could let a malicious server run code with the developer’s own permissions during sign-in.
Anomaly fixed the flaw in version 1.18.33 on September 28, but released the repair as a routine browser-launch refactor. Neither the release notes nor the change description identified a security flaw. The company also did not request a CVE—a standard identifier for a publicly recorded vulnerability—or publish a security advisory. According to the report, vulnerability scanners and dependency alerts will therefore not flag affected installations for this flaw.
OpenCode connects to Model Context Protocol (MCP) servers to give the coding agent access to outside tools. To exploit this flaw, an attacker must control a remote MCP server the developer has already added. A previously legitimate server could also become dangerous after a takeover or a change in ownership of its domain.
During sign-in, the server supplies an OAuth authorization address—the web address used for the sign-in step. On Windows and WSL, OpenCode passed that address to a browser-launch helper, which inserted it into a PowerShell command without safely separating the address from executable instructions. A malicious address could therefore cause a command to run.
The vulnerable step runs only when the developer initiates MCP sign-in. Simply configuring a server or opening an OpenCode session does not trigger it. OpenCode on macOS and Linux is unaffected because it opens the browser without passing the address through a command shell.
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
According to The Hacker News’s account, Pillar Security privately reported the flaw on August 29 and disclosed it publicly on October 19. Pillar rates it critical and proposes a severity score of 9.8 out of 10.
Pillar later asked Anomaly to reconsider requesting a CVE. According to Pillar, Anomaly replied that malicious MCP servers fall outside its threat model—the risks its security design is intended to address. The report also cites Anomaly’s security policy, which places user-configured MCP servers “outside our trust boundary.”
Pillar reported no signs that attackers had used the flaw and published no indicators for checking past exploitation. The reported ability to execute code is not evidence that an attack occurred.
Affected Windows and WSL users should upgrade to OpenCode 1.18.33 or later and review their configured MCP servers, The Hacker News advises. Users who cannot yet upgrade should remove remote MCP servers they have not vetted rather than rely on the absence of a vulnerability alert.
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
