> Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)

[SOURCE] Datadog Security Labs [DATE: 24/09/2026 00:00] [LANGUAGE: EN]

Datadog Security Labs discovered GHSA-632h-h47v-g4x4, a vulnerability in OpenCode's upgrade endpoint that, under certain conditions, allowed malicious webpages to execute code on developers' machines.

[messages.read_original_source] →