CVE-2026-88899 — knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary direct…
Published: 2026-09-10 · CVSS: 9.3 · CVSS 4.0
knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7