Entrar Obtener clave API

Vulnerabilidades de vercel @ai-sdk/harness-opencode (CVE)

Registros CVE publicados para vercel @ai-sdk/harness-opencode, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

6.3Media

CVE-2026-64651 hace 3 meses

AI SDK OpenCode Harness Tool Relay Authorization Bypass

vercel @ai-sdk/harness-opencode

The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (`host-tool-mcp.mjs`). Thi…