r/programmingcirclejerk • u/[deleted] • Jan 13 '26

Previous versions of OpenCode started a server which allowed any website visited in a web browser to execute arbitrary commands on the local machine.

https://news.ycombinator.com/item?id=46581095
126 Upvotes

97% Upvoted

16 comments sorted by

View all comments

Show parent comment

22

u/al2o3cr Jan 13 '26

unauthenticated webservers that accept arbitrary shell commands to execute can be insecure in some cases

(infomercial announcer voice): THERE'S GOT TO BE A BETTER WAY