CVE-2026-112346
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution…
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers wh…
- Affected
- See advisory
- Fix
- Upgrade the product to 1.52.0 or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
- https://github.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861342af9de
- https://github.com/OpenHands/software-agent-sdk/pull/5209
- https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0
- https://www.vulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandbox-agent-server-rce
Original description
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
Last activity 26 Oct 2026. Patch Forecast updates every hour.