Security News OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL TheHackerNews Daniel Bender 22 Oct 2026 Share A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth sign-in.