Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| OpenHands | OpenHands Software Agent SDK | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 26 Oct 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store. | |
| Title | OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE | |
| Weaknesses | CWE-1327 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-10-26T15:34:30.749Z
Reserved: 2026-10-19T14:41:46.702Z
Link: CVE-2026-112346
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-26T16:17:14.110
Modified: 2026-10-26T16:17:14.110
Link: CVE-2026-112346
Redhat
No data.
OpenCVE Enrichment
No data.