CVE-2026-112346: OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

Awaiting analysis

Published 26-10-2026Last modified 26-10-2026

Vulnerability summary

CVE-2026-112346 is a critical (CVSS 9.8) Binding to an Unrestricted IP Address vulnerability in openhands openhands software agent sdk.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (CVE.org)

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

26-10-2026
PublishedVulnerability first disclosed.

Description

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.