Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-22812— OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

Quick assessment

Affected
anomalyco opencode
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

opencode是Anomaly开源的一个AI编程智能体。 opencode 1.0.216之前版本存在安全漏洞，该漏洞源于自动启动未经身份验证的HTTP服务器，可能导致执行任意shell命令。

CVSS 8.8 · High EPSS 16.54% · P97

Public Exploits 1

Nuclei · 1 CVE-2026-22812.yaml [template]

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-22812

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
Source: CVE Program / CVE List V5
Vulnerability Description
OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
opencode 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
opencode是Anomaly开源的一个AI编程智能体。 opencode 1.0.216之前版本存在安全漏洞，该漏洞源于自动启动未经身份验证的HTTP服务器，可能导致执行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
anomalyco opencode < 1.0.216 -

II. Public POCs for CVE-2026-22812

# POC Description Source Link Shenlong Link
1 CVE-2026-22812 - OpenCode Unauth RCE https://github.com/Udyz/CVE-2026-22812-Exp POC Details
2 None https://github.com/rohmatariow/CVE-2026-22812-exploit POC Details
3 CVE-2026-22812 https://github.com/Ashwesker/Ashwesker-CVE-2026-22812 POC Details
4 CVE-2026-22812 - OpenCode Unauthenticated RCE-Nuclei template for scan https://github.com/mad12wader/CVE-2026-22812 POC Details
5 None https://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E6%BC%8F%E6%B4%9E/OpenCode%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2026-22812.md POC Details
6 OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying server. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22812.yaml POC Details
7 Security-hardened fork of OpenCode - Fixes CVE-2026-22812 (CVSS 8.8 RCE) that upstream refuses to patch https://github.com/barrersoftware/opencode-secure POC Details
8 OpenCode < v1.0.216 - Unauthenticated RCE https://github.com/0xgh057r3c0n/CVE-2026-22812 POC Details
9 None https://github.com/CayberMods/CVE-2026-22812-POC POC Details
AI-Generated POC Verified env Premium
Reproduced successfully in a real sandbox · Below is the actual recording of building the environment and exploiting the vulnerability.
Success marker: VULNERABLE: unauthenticated POST /pty executed the shell command; proof token exfiltrated to attacker path: PROOF_0ce890b04ead2829
Reproduction recording is a Pro+ exclusive
Watch the full sandbox build + live exploit recording for this CVE. Limited-time ¥499/mo.
Upgrade to Pro+
claude_code · 2913 chars
GitHub 复现环境（可 clone 直接跑）
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-22812

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-22812 (1)

IV. Related Vulnerabilities

Same product: opencode
Same vendor: anomalyco
Same weakness: CWE-306

V. Comments for CVE-2026-22812

No comments yet

Leave a comment