Vulnerability in Openhands Software Agent Sdk
CVE-2026-112346
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0 (release-notes)
- github.com/OpenHands/software-agent-sdk/pull/5209 (issue-tracking)
- github.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861… (patch)
- www.vulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandb… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-112346?
- CVE-2026-112346 is a critical-severity vulnerability in Openhands Software Agent Sdk, classified under CWE-1327. CVSS score: 9.8/10. Published 2026-10-26.
- How severe is CVE-2026-112346?
- Critical severity. CVSS v3 base score is 9.8 out of 10.