Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.
CVE-2026-88624
NONE
Updated Sep 22, 2026
Payload
CVE Details
CVE ID
CVE-2026-88624
Published Date
Sep 22, 2026
Vendor
Payload
Severity
NONE
Impact
Minimal impact
Source
View Advisory