OpenCode users face unflagged flaw despite September fix
Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because its developer issued a fix without a public security advisory. Pillar Security said the flaw affects the open-source artificial intelligence coding agent on Windows and Windows Subsystem for Linux, allowing an attacker-controlled remote server…
We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.