OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth sign-in.
More info