Openhands vulnerabilities

2 vulnerabilities

Known vulnerabilities in Openhands products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
9.8CriticalCVE-2026-112346openhands · openhands software agent sdkOpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCEOpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.9.9CriticalCVE-2026-33718openhands +1 moreOpenHands is Vulnerable to Command Injection through its Git Diff HandlerOpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversation_id}/git/diff` API endpoint is passed unsanitized to a shell command, allowing authenticated attackers to execute arbitrary commands in the agent sandbox. The user is already allowed to instruct the agent to execute commands, but this bypasses the normal channels. Version 1.5.0 fixes the issue.EPSS2.01%