A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth ...