CVE-2026-88624

n/a / n/a PUBLISHED

Description (CNA)

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/MyselfYangjz/vulnReport/issues/2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.