Skip to content
OpenAdvisories

Product · OpenHands

OpenHands Software Agent SDK

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-112346

    OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

    OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_…

    OpenHands OpenHands Software Agent SDK