Agent SDK (< 1.52.0)

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability due to insecure workspace launcher network binding and disabled authentication.