OpenHands Agent SDK: Unauthenticated remote code execution (CVE-2026-112346)
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability due to insecure workspace launcher network binding and disabled authentication.
CVE search metadata
CVE search record: CVE-2026-112346. Severity: critical. CVSS: 9.8. KEV: no. Product: Agent SDK (< 1.52.0). Brief: OpenHands Agent SDK: Unauthenticated remote code execution (CVE-2026-112346). Brief link: https://feed.craftedsignal.io/briefs/2026-10-openhands-rce/
Triage facts
Revision 1- Applicability
- Agent SDK (< 1.52.0)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 17:44 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.