[DANGER] Data Leak to cat-jam-free #55150

Activity

1. udet-at

   changed the title [-][DANGER][/-] [+][DANGER] Data Leak to cat-jam-free[/+] on Oct 13, 2026
2. opencode-agent commented on Oct 13, 2026

   

   opencode-agentBot

   on Oct 13, 2026 – with OpenCode Agent

   Contributor

   More actions

   Thanks for reporting this, @RalphBariz, and sorry for the trouble. If a configured setup quietly sends work to a model you never chose, that's serious, so we'd like to find out exactly how it happened. To work out which code path picked cat-jam-free (a free built-in OpenCode Zen model), could you share:

   1. Your OpenCode version (opencode --version), and whether you used the terminal UI or the desktop app.
   2. Your opencode.json (global and/or project) with all API keys and secrets removed. We especially need to know whether you set a top-level default model, or only configured providers.
   3. How you opened the new tab (the + in the tab rail, /new, a fresh opencode start, etc.), and whether a model had been picked in another tab or another OpenCode window shortly before.
   4. What the model picker or footer showed in that tab before you sent the prompt, if you remember.
   5. Your OS and how you installed OpenCode.
   6. If you can, run opencode models --print-logs and check for any warnings about your config file. A config file with a syntax error is currently skipped without a visible error, and OpenCode then falls back to the built-in models.

   You can reply here with the details, or edit the issue. If you edit it, please also leave a comment saying you've updated it, so we know you're done.

   These existing issues are closely related, ordered by likelihood. One of them may already cover what happened:

   • tui: tab model selection follows other tabs and clients #54363: a tab with no model of its own picks up the model chosen in another tab or OpenCode window, so a new tab can start on a different model than you expect.
   • tui (v2): config default model ignored, falls back to first provider's model #43055: the v2 terminal UI ignores the default model from the config and falls back to another provider's model.
   • invalid opencode.json is silently ignored #54786: an invalid opencode.json is ignored without any warning, which leaves only the built-in opencode/* models.
   • Setting provider.<id>.options.baseURL changes which model opencode picks by default #54686: how the default model is chosen when no model is selected; with an empty config, the built-in free model is picked.

   On your request to never use anything other than the providers you configured: as #54686 shows, the built-in opencode provider can already be excluded in the config, so it can't be picked as a fallback. Maintainers can look at going further than that once we understand what happened here.
3. opencode-agent

   added

   triaging

   on Oct 13, 2026
4. udet-at commented on Oct 13, 2026

   

   udet-at

   on Oct 13, 2026

   Author

   More actions

   1. opencode v2.0.24
   2. opencode.json

   {
     "$schema": "https://opencode.ai/config.json",
     "permission": {
       "read": "allow",
       "*": "ask",
       "tavily_*": "ask"
     },
     "provider": {
       "dgx": {
         "npm": "@ai-sdk/openai-compatible",
         "name": "xxxxxxxxxxxxxxxxx",
         "options": {
           "baseURL": "https://xxxxxxxxxxxxxxxxx/v1"
         },
         "models": {
           "qwen3:125b": {
             "name": "qwen3:125b"
           }
         }
       }
     },
     "mcp": {
       "tavily": {
         "type": "local",
         "enabled": true,
         "command": ["npx", "-y", "tavily-mcp@latest"],
         "environment": {
           "TAVILY_API_KEY": "tvly-xxxxxxxxxxxxxxxxx"
         }
       }
     }
   }
   

   3. • in the tab rail, previous tab has the correct model
   4. do not remember
   5. Debian 13 and curl -fsSL https://opencode.ai/v2/install | bash
   6. as said, other tabs have the correct model, so config needs to be right

   dgx/qwen3:125b
   opencode/big-pickle
   opencode/cat-jam-free
   opencode/exo-free
   opencode/ling-3.0-flash-fin-free
   opencode/ling-3.1-flash-free
   opencode/longcat-2.5-preview-free
   opencode/mimo-v2.6-flash-free
   opencode/muse-spark-1.3-contributor-free
   opencode/nemotron-3-ultra-free
   opencode/nemotron-3.5-lightning-free
   opencode/space-bunny-free
   opencode/step-5-preview-free
   
5. opencode-agent

   removed

   triaging

   on Oct 13, 2026
6. opencode-agent commented on Oct 13, 2026

   

   opencode-agentBot

   on Oct 13, 2026 – with OpenCode Agent

   Contributor

   More actions

   Thanks for the details, @RalphBariz. I tried to reproduce this on v2.0.24 with a config like yours: one custom openai-compatible provider, no top-level model, and the built-in opencode provider left enabled. I sent a prompt in the first tab, then opened a new tab with + in the tab rail. In my test environment the new tab kept the custom model. But the built-in opencode/* free models never loaded there, so the model it apparently fell back to for you (cat-jam-free) wasn't available. That means my test doesn't rule your case out. This needs to be checked by a maintainer in an environment where those built-in free models load.

   From reading the v2.0.24 code: when a new tab has no model of its own, it falls back to the top-level model from your config (you don't set one), then the most recently used models shared across tabs and windows, then the first model in the list. So if your custom model was never picked explicitly from the model picker, or a different model was picked in another tab or window (see #54363), a new tab can end up on one of the built-in free models.

   Until this is looked at, you can protect yourself by setting a default model at the top level of your opencode.json:

   "model": "dgx/qwen3:125b"

   It also helps to check the model shown under the prompt before sending in a new tab. Related issues: #54363 (a tab's model follows choices made in other tabs or windows), #43055 (default model selection in the v2 terminal UI) and #54686 (how the default model is picked, including the built-in free models).
7. opencode-agent

   added

   severity:high

   on Oct 13, 2026