Skip to content
OpenAdvisories

Product · Microck

opencode-studio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-69110

    OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

    OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:…

    Microck opencode-studio