4 min read
News Brief Pillar Security says a malicious MCP server could run commands on Windows developer machines through OpenCode's OAuth flow. The fix shipped in 1.18.33. No CVE or public advisory found as of Oct 20.
silent-patch
Pillar Security says a malicious MCP server could run commands on Windows developer machines through OpenCode's OAuth flow. The fix shipped in 1.18.33. No CVE or public advisory found as of Oct 20.