uziii2208/CVE-2026-88899

PoC

Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

view exploit source poc_in_githubauthor uziii2208published 2026-09-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-88899US	critical9.8	0.81% (57th)	Exploit	2026-09-10
knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.