REPORTED DEVELOPMENT
22 October is the secondary-report date; original-source dates are inconsistent.
Pillar Security research reported by The Hacker News describes OpenCode 1.0.137-1.18.32 on Windows and WSL accepting malicious remote-MCP OAuth metadata capable of causing commands to execute with user privileges during authentication. Version 1.18.33, released on 28 September, fixes the issue.
Researchers say it was fixed without a security advisory or CVE; 9.8 is their proposed CVSS score, not an official classification. Inconsistent publication dates in the original source remain unresolved.
WHY IT MATTERS TO THE MARKET
CVE-only checks can miss material issues. Agent authorisation, MCP-server trust, OAuth metadata handling and operating-system privileges are different controls.