CVE-2026-22812

CVE Enrichment

CVSS: 8.8 HIGH
EPSS: 16.54%
EPSS Percentile: 96.98%
CISA KEV: Not listed

Description

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 13-Jan-2026 06:15
Last Modified: 17-Jun-2026 17:20
EPSS Date: 2026-10-26
CWE: CWE-306, CWE-749, CWE-942

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:R /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

anoma / opencode
Version / affected range: * · before (exclusive) 1.0.216
cpe:2.3:a:anoma:opencode:*:*:*:*:*:-:*:*

References

134c704f-9b21-4f2e-91b3-4a467353bcc0

Last enrichment sync: 27-Oct-2026 04:10
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

server with open CORS, so any website the developer visited could run shell commands on the machine (CVE-2026-22812). Although all of these were fixed, the pattern is not. How to Secure AI Coding Harnesses in the Enterprise

CVE (1)

MITRE ATT&CK (1)

Vendors (5)

Products (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.