OpenCode Flaw

OpenCode

OpenCode flaw allows malicious MCP servers to execute code during sign-in

Do this now

Upgrade OpenCode to version 1.18.33 or later before signing in to untrusted MCP servers.

Fix it

Upgrade to OpenCode 1.18.33

First seen: 22 Oct 2026
Last update: 22 Oct 2026, 10:44 UTC
Fixed in: 1.18.33
Source: news
On the menu as: AI API keys

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## OpenCode Flaw
Severity: unknown. Patch status: patched.
Affected: OpenCode
Fixed in: 1.18.33

OpenCode flaw allows malicious MCP servers to execute code during sign-in

## Steps
1. This incident involves a provider (ai-keys). Search config, CI and env templates (.env.example, wrangler.toml, vercel.json, terraform, workflow secrets) for credentials stored there. List each secret by name, where it is used, and how to rotate it. Never print secret values.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html
https://pwned.coffee/i/opencode-flaw

Receipt

Exploitation: No known exploitation
Fix by release line: Product Affected Fixed in Source
OpenCode before 1.18.33 1.18.33 Reported
Score: No CVSS published yet: severity unknown.
Last checked: 24 Oct 2026, 17:17 UTC

Product	Affected	Fixed in	Source
OpenCode	before 1.18.33	1.18.33	Reported

Sources: KEV – CVE record – Vendor –

Sources

feeds.feedburner.com: OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

Totalone coffee