Tag
#mcp
OpenCode MCP OAuth Sign-In RCE on Windows, Fixed in 1.18.33
In OpenCode 1.0.137 to 1.18.32 on Windows and WSL, a malicious MCP server's OAuth sign-in URL reaches PowerShell and runs code as the developer; fixed in 1.18.33, with no CVE.
Oct 26, 2026
October 2026: From Security Findings to Tested Fixes
We added approvals to control dangerous actions, introduced Ticket Agent for autonomous triage an...
Oct 17, 2026
New Dashboard UI, On-Premises Scanner, Agentic Scan Knowledge, Multi-Asset Scanning, Linear & MCP Integrations, and New Model Support
This release adds a redesigned Dashboard UI (Cockpit, Focus Mode, and Custom Dashboards), keyboar...
Sep 02, 2026
Introducing the Ostorlab Platform MCP Server
Ostorlab now supports MCP, giving AI assistants and agents permission-controlled access to securi...
Aug 08, 2026