CVE-2026-112346

Name of the Vulnerable Software and Affected Versions OpenHands Software Agent SDK versions prior to 1.52.0

Description An unauthenticated remote code execution issue exists where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) while using an empty session api keys list. This configuration disables authentication by default. An attacker with network access to the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root within the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.

Recommendations Update to version 1.52.0. Keep sandbox ports off untrusted networks.