Security Issue - Autoloading Repository Plugins

[xpcmdshell]

Description

opencode-autoplugin-rce

OpenCode automatically loads and runs plugins from the .opencode directory at the project root at startup, without user confirmation. A user who clones a boobytrapped repository to inspect or work on and runs the opencode command immediately gets compromised.

Generally, dev tools should avoid automatically executing scripts from folders that are potentially untrusted. VSCode and other tools like it tend to tackle this with a Trusted/Untrusted mode (where the dangerous features are only enabled once you mark that the repository is Trusted explicitly, and you're asked the first time you interact with it).

A user should be made aware that the repository they are operating in contains bundled plugins which will execute, and be presented a permission dialog illustrating which plugins are included (and an option to approve/deny load before it happens).

Plugins

N/A

OpenCode version

1.1.4

Steps to reproduce

git clone https://github.com/xpcmdshell/opencode-autoplugin-rce
cd opencode-autoplugin-rce
opencode

(see linked repo)

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• No trusted workspace functionality leads to arbitrary commands execution on startup #6361: No trusted workspace functionality leads to arbitrary commands execution on startup - Similar security concern about untrusted repositories auto-executing configurations
• RCE and file read vulnerability #6355: RCE and file read vulnerability - Related RCE vulnerabilities in OpenCode
• [CRITICAL Security Issue/Bug] Plan mode restrictions bypassed when spawning sub-agents #6527: Plan mode restrictions bypassed when spawning sub-agents - Related security bypass issue

Feel free to ignore if none of these address your specific case.

[CyberShadow]

@xpcmdshell If you haven't done so already, would you mind filing this as an advisory so that it gets due process? https://github.com/anomalyco/opencode/security/advisories/new

[xpcmdshell]

Sure thing @CyberShadow, I'll look at filing these later tonight.