Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2026-88624

Arbitrary Recursive Directory Deletion in openCode Worktree.remove

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Opencode
Products
Opencode