Threats affecting pkg:github/opencode-studio

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.8%	CVE-2026-69110Microck opencode-studio · Path Traversal Critical9.3EPSS 0.8%2026-08-04CVE Database V5CVE-2026-69110 OpenCode Studio versions prior to 2.4.4 contain a critical vulnerability allowing unauthenticated remote attackers to read arbitrary files in certain directories and delete videos by ID via unauthenticated API endpoints. This missing authentication flaw exposes intermediate audio, video, and subtitle files belonging to other users, posing significant confidentiality and integrity risks. EPSS 0.8%Vulnerability	CVE Database V5	2026-08-04

Page 1 of 1