CVE-2026-112346
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
| CWE | CWE-1327 |
| Vendor | openhands |
| Product | openhands software agent sdk |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for openhands openhands software agent sdk
Be the first to know when new critical vulnerabilities affecting openhands openhands software agent sdk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
OpenHands / OpenHands Software Agent SDK
0 < 1.52.0
References
github.com: https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0 github.com: https://github.com/OpenHands/software-agent-sdk/pull/5209 github.com: https://github.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861342af9de vulncheck.com: https://www.vulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandbox-agent-server-rce
Credits
mil4n