Security · 1h ago
Coding agents' local shell access poses serious security risks
A teardown of opencode revealed a default HTTP server with permissive CORS and an endpoint that ran arbitrary shell commands, allowing any website to take over the machine. The author audited their own agent runtime and found similar vulnerabilities, including browser drive-by RCE and DNS rebinding. Fixes include origin gating, host header checks, and opt-in OS sandboxing.
Meridian48 take
The piece correctly identifies that string-based command filtering is insufficient, but the real test is whether the broader ecosystem adopts OS-level sandboxing rather than relying on network posture alone.
Read the full reporting
Your coding agent runs a shell on your machine. I audited mine. →
DEV Community
coding-agentslocal-daemon-security