Risky Business · Wednesday, October 21, 2026
Patrick Gray and James Wilson discuss a breach of OpenCode console accounts where attackers stole tokens to perform a distillation attack against frontier AI models. Mark Khoury also notes that OpenCode previously patched an uncoordinated remote code execution (RCE) vulnerability in its Windows and WSL client.
“Someone breached open code console in order to steal tokens and to conduct some sort of distillation attack against Frontier models.”
“OpenCode, the client the harness on Windows and WSL had an RCE where if you connect to a malicious MCP you're just vulnerable to RCE.”