OpenHands CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL OpenHands CVE published 2026-10-26

CVE-2026-112346

OpenHands Software Agent SDK versions before 1.52.0 have a critical vulnerability allowing unauthenticated remote code execution. The DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces by default, disabling authentication. Attackers who can reach the published container port can execute arbitrary shell commands as root in the sandbox, access the mount [truncated]