CyberRota Analysis
AI-GeneratedThe Worktree.remove component in openCode v1.18.26 is vulnerable due to inadequate path validation, enabling attackers to perform arbitrary recursive directory deletions through specially crafted payloads. This flaw poses a significant risk to any systems utilizing this version of openCode, particularly those handling sensitive or critical data. Organizations using this software should prioritize remediation to prevent potential data loss and system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.