CVE-2026-112346
Received Received - Intake

Unauthenticated Remote Code Execution in OpenHands SDK

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulnCheck

Description
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-112346
EUVD
EUVD-2026-109918

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
OpenHands OpenHands Software Agent SDK 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1327 The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated remote code execution vulnerability in OpenHands Software Agent SDK versions before 1.52.0. The DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with authentication disabled by default. Attackers who can reach the container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root, access the workspace, and read plaintext secrets.

Detection Guidance

Check if OpenHands Software Agent SDK versions prior to 1.52.0 are installed by running: 'pip show openhands-software-agent-sdk' or 'pip list | grep openhands'. Verify if Docker containers are publishing ports on 0.0.0.0 instead of 127.0.0.1 using 'docker ps' and 'docker inspect <container_id>'. Look for unauthenticated HTTP/WebSocket requests to exposed ports.

Impact Analysis

If you use OpenHands Software Agent SDK before version 1.52.0, attackers could exploit this to run malicious code on your system with root privileges, access sensitive data in your workspace, or steal secrets stored in plaintext. The impact includes full system compromise and data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to data breaches.

Mitigation Strategies

Upgrade to OpenHands Software Agent SDK version 1.52.0 or later immediately. Ensure Docker ports are bound to 127.0.0.1 by modifying run commands. Restrict network access to container ports via firewall rules. Verify session API keys are properly configured to prevent unauthenticated access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112346. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart