OpenCode security incident history
Hacking, data breaches and other security incidents involving OpenCode, with related coverage.
Incidents: 1 · Most recent
OpenCode console breach may have exposed users' API keys
Impact: Approximately 1.4% of console users affected and charges incurred on AI accounts
The OpenCode console was breached on 17 October 2026, affecting approximately 1.4% of console users who had connected external AI providers. AI API keys stored in workspaces may have been exposed, and the attacker ran up charges on users' AI accounts. The open-source app and command-line tools were unaffected.
Related reports: 7 · last report →