OpenCode Quietly Fixed Critical MCP RCE

This is a serious warning for AI coding tools: remote MCP servers must be treated as untrusted inputs, not trusted integrations.

• –A crafted OAuth authorization URL could reach PowerShell and execute arbitrary code with the developer’s privileges.
• –The issue required no prompt injection, malicious package installation, or extra user approval after connecting to the remote MCP server.
• –URL scheme checks alone were insufficient because the payload could use a valid HTTPS URL.
• –OpenCode users on Windows and WSL should upgrade to 1.18.33 or later and audit remote MCP configurations.
• –Without a CVE, dependency scanners and vulnerability feeds will not reliably identify vulnerable installations.