Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Linux support is coming to Snapdragon X2 Series(qualcomm.com)
    165 pointsby 3 hours ago
    71comments
  2. Claude discovers a novel enzyme system with CRISPR-like repeats(anthropic.com)
    514 pointsby 8 hours ago
    537comments
  3. Meta VR Glasses(meta.com)
    235 pointsby 2 hours ago
    195comments
  4. VSCode's SSH Agent Is Bananas (2025)(fly.io)
    134 pointsby 5 hours ago
    86comments
  5. ArXiv receives multiyear commitments to support it as an independent nonprofit(arxiv.org)
    61 pointsby 3 hours ago
    10comments
  6. The "Windows XP Box" (2003)(mini-itx.com)
    58 pointsby 3 hours ago
    9comments
  7. Virtio-nvgpu: Near-native Nvidia GPU access inside a KVM guest(github.com/nestrilabs)
    9 pointsby 1 hour ago
    2comments
  8. Mercury 2.5 LLM hits 770 tokens per second(artificialanalysis.ai)
    55 pointsby 4 hours ago
    26comments
  9. Feds Target AI Critics as "Foreign Agents"(kenklippenstein.com)
    15 pointsby 1 hour ago
    3comments
  10. Fixing the Portobello Police Station Clock(pointinthecloud.com)
    382 pointsby 11 hours ago
    89comments
  11. FLAWED's Flaws and What This Means for Industry Research(suhacker.ai)
    11 pointsby 1 hour ago
    1comments
  12. We just shipped support for the ugliest part of HTTP: Vary(cloudflare.com)
    82 pointsby 4 hours ago
    13comments
  13. Italian parliament votes for return to nuclear energy(apnews.com)
    602 pointsby 9 hours ago
    387comments
  14. Show HN: An open-source manufacturing ERP/MES/QMS(carbon.ms)
    10 pointsby 1 hour ago
    5comments
  15. LensVLM: Compressing long context as images, expanding only relevant pages(huggingface.co)
    58 pointsby 6 hours ago
    7comments
  16. The mystery animal on an ancient god's head(signoregalilei.com)
    57 pointsby 5 hours ago
    17comments
  17. Show HN: Combinators in Array Languages(softwarewrighter.com)
    4 pointsby 1 hour ago
    —discuss
  18. A brief history of Windows scroll bar shortcuts(devblogs.microsoft.com/oldnewthing)
    111 pointsby 8 hours ago
    51comments
  19. Making Tailscale Faster(tailscale.com)
    80 pointsby 8 hours ago
    38comments
  20. Augustofaces: Pareidolia Fine Art(augusto.at)
    19 pointsby 3 hours ago
    1comments
  21. The Curious Power of Punctuation(newyorker.com)
    27 pointsby 5 hours ago
    4comments
  22. Australia says OpenAI agent hacked into government website(channelnewsasia.com)
    14 pointsby 56 minutes ago
    5comments
  23. Gemini 3.8 text-to-speech(blog.google)
    255 pointsby 10 hours ago
    124comments
  24. Tokens too cheap to meter(jyn.dev)
    242 pointsby 16 hours ago
    178comments
  25. Radicle: Disclosure of Vulnerability in the Network Protocol(radicle.dev)
    126 pointsby 10 hours ago
    50comments
  26. Swap, ZRAM, Zswap and Hibernate on NixOS(matthewbrunelle.com)
    42 pointsby 8 hours ago
    10comments
  27. QuestDB (YC S20) Is Hiring a Sales Engineer(questdb.com)
    14 hours ago
    —discuss
  28. I don't want the details(michaelheap.com)
    358 pointsby 13 hours ago
    200comments
  29. Z80 REPL (2018)(abagames.github.io)
    148 pointsby 15 hours ago
    18comments
  30. A refined phylochronology of the second plague pandemic in Western Eurasia(pnas.org)
    14 pointsby 5 hours ago
    —discuss

OpenCode AI coding agent hit by critical unauthenticated RCE vulnerability

3 pointsby 8mo agogithub.com
Open original View on HN
2 comments
8mo agoHN ↗

Probably nothing based on what? I have reproduced the finding locally...

Any website can trivially run arbitrary code as the current user if OpenCode is installed; that's CVSS ~10.

Open thread on HN ↗