Open and Shut: Remote Code Execution in opencode via MCP OAuth

Pillar Security disclosed a critical remote code execution flaw in the opencode AI coding agent (affecting versions >=1.0.137 to <=1.18.32 on Windows and WSL) where a malicious or compromised remote MCP OAuth server can supply an authorization_endpoint URL that triggers PowerShell argument expansion and executes arbitrary commands; Anomaly fixed it in opencode 1.18.33 (bumping open to 11.0.4 and adding scheme checks) but did not request a CVE, creating a detection gap — organizations should upgrade, inventory affected installs, and treat MCP endpoints as untrusted.