OpenHands OpenHands Software Agent SDK vulnerabilities (CVE)

CVE records published for OpenHands OpenHands Software Agent SDK, newest first. Follow to get an email when a new one appears.

1 results

9.8Critical

CVE-2026-112346 15 days ago

OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands OpenHands Software Agent SDK

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_…

1.0%EPSS