CVE-2026-88624
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 22, 2026
Vendor
unknown
Description
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.