Tag: opencode

All the articles with the tag "opencode".

• [AUTO] OpenCode's Silent Patch Hides Critical RCE

  23 Oct, 2026

  A critical OpenCode vulnerability was silently patched without CVE or advisory, making it invisible to security scanners.

• OpenCode Denies `git`. It Runs `$(which git)` Just Fine.

  20 Jul, 2026

  A viral teardown of OpenCode, the 161k-star coding agent, shows its bash permission system parsing commands into a tree-sitter AST and still waving through env git, base64 pipes, and python subprocess. Textual command filtering is security theater, and the harness is the only trust boundary that matters.