Skip to content
OpenAdvisories

Vendor

OpenHands

2 known vulnerabilities.

Products

OpenHands Software Agent SDK 1 OpenHands 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-33718 Public exploit

    OpenHands is Vulnerable to Command Injection through its Git Diff Handler

    OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversatio…

    OpenHands OpenHands openhands-ai PyPI