Skip to content
OpenAdvisories

Product · vercel

@ai-sdk/harness-opencode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-64651

    AI SDK OpenCode Harness Tool Relay Authorization Bypass

    The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (`host-tool-mcp.mjs`). Thi…

    vercel @ai-sdk/harness-opencode