CVE-2026-22813— Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-22813
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenCode is an open source AI coding agent. The markdown renderer used for LLM responses will insert arbitrary HTML into the DOM. There is no sanitization with DOMPurify or even a CSP on the web interface to prevent JavaScript execution via HTML injection. This means controlling the LLM response for a chat session gets JavaScript execution on the http://localhost:4096 origin. This vulnerability is fixed in 1.1.10.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
opencode 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
opencode是Anomaly开源的一个AI编程智能体。 opencode 1.1.10之前版本存在安全漏洞，该漏洞源于Markdown渲染器未对LLM响应进行清理，可能导致通过HTML注入执行JavaScript。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-22813
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-22813
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-22813 (1)
IV. Related Vulnerabilities
Same weakness: CWE-79
- CVE-2026-49044
WordPress Advanced Custom Fields: Font Awesome Field plugin - CVE-2026-49102
Webmin <2.640 XSS漏洞 - CVE-2026-47119
Agent Zero < 1.15 Stored XSS via image_get API Endpoint - CVE-2025-3633
IBM Cognos Analytics is affected by multiple security vulner - CVE-2026-42750
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scriptin
V. Comments for CVE-2026-22813
No comments yet