Unauthenticated remote code execution in OpenCode