Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

YearlyBest value · save 44%$999/year$83.25/mo, billed yearly. Save $789 vs monthly (5+ months free).Monthly$149/monthBilled monthly. Cancel anytime.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

← Live incidents

Nov 15, 2025

0 new incidents, 1 with updates.

Updated

  • LivePatched

    npm open PowerShell injection (CVE-2026-119025): malicious MCP servers can run code on Windows/WSL via OpenCode and MCP Inspector sign-in

    A command-injection flaw in the widely used npm package open (versions 7.2.0 to before 11.0.0) lets a crafted URL run PowerShell code on Windows and WSL: open placed the URL unescaped inside a PowerShell double-quoted string, where $(...) subexpressions execute. Tools that open server-supplied URLs are exposed. A malicious or hijacked remote MCP server can answer with an OAuth authorization endpoint containing a payload, and it runs as soon as the developer connects or signs in. Affected apps named in the CVE record are the OpenCode AI coding agent 1.0.137 to 1.18.32 (fixed in 1.18.33 on Sep 28 without an advisory) and MCP Inspector 2.0.0 to 2.11.0 (fixed in 2.12.0, GHSA-q978-78c7-phqw). open itself fixed the escaping in 11.0.0. VulnCheck assigned CVE-2026-119025 on Oct 29 2026 and rates it High (CVSS 4.0 7.7); Pillar Security, which found it, had proposed 9.8 for OpenCode. macOS and Linux are not affected; no in-the-wild exploitation reported.

    npm open package (7.2.0 to 10.x) and apps using it on Windows/WSL, including OpenCode and MCP InspectorSince Oct 19, 2026

Sponsored

Buy sponsor slot · $149/mo