Preliminary research

OpenCode upgrade RCE: text/plain JSON, top-level navigation and package-install targets

Christophe Tafani-Dereeper · Datadog Security Labs · 24 September 2026

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

OpenCode parsed text/plain forms as JSON and accepted remote tarballs as upgrade targets. A top-level localhost request could run package scripts, with npm/pnpm/Bun installs and no password or cached Basic credentials.

Record

Researcher

Christophe Tafani-Dereeper

Published by

Datadog Security Labs

Date

24 September 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Security advisory
• August fix
• Embedded demonstration

Tags

• csrf
• content-type
• rce
• ai-agent
• nodejs
• owasp-a01-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Christophe Tafani-Dereeper, first published at the original source. Preserved copies are kept so the citation survives its host.