Critical severity9.1NVD Advisory· Published Sep 22, 2026· Updated Sep 24, 2026
CVE-2026-88624
CVE-2026-88624
Description
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.