4 min read
News Brief Pillar Security says a malicious MCP server could run commands on Windows developer machines through OpenCode's OAuth flow. The fix shipped in 1.18.33. No CVE or public advisory found as of Oct 20.
windows
Pillar Security says a malicious MCP server could run commands on Windows developer machines through OpenCode's OAuth flow. The fix shipped in 1.18.33. No CVE or public advisory found as of Oct 20.