Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

Cybersecurity researchers (Guardio Labs) disclosed a patched remote code execution vulnerability in Opera and Opera GX called “MyFlaw” that abused the My Flow feature and a built-in extension (Opera Touch Background) to bypass the browser sandbox and execute files on Windows and macOS; the issue leveraged a forgotten landing page lacking content security protections to deliver injected JavaScript and a malicious payload, required pairing/user interaction, and was fixed by Opera in November 2023.