← Home

OpenWorker

2026 · Open source · Merged contributor

OpenWorker is an open-source AI agent project (14,000+ stars). I fixed a remote code execution flaw where cloning any repository let its configuration file silently launch processes on the user's machine as soon as the project was opened.

Contributions

  • Gated dangerous configuration behind the project's existing trust check, blocked by default across all three load paths.
  • Added regression tests proving untrusted projects cannot launch processes or override trusted server names.
  • Maintainer verified the fix against the original proof-of-concept.

Outcomes

  • Security fix merged upstream into andrewyng/openworker.
  • Untrusted projects can no longer auto-launch processes on open.