by Kastro
Paper/Archive/CVE-2026-112346

CVE-2026-112346

OpenHands OpenHands Software Agent SDK — OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.2.632 × 2012.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.

Affected

ProductAffectedFixed inSource
OpenHands Software Agent SDK< 1.52.01.52.0CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

refgithub.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0refgithub.com/OpenHands/software-agent-sdk/pull/5209patchgithub.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861342af9dewriteupvulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandbox-agent-server-rce