CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-112346?
CVE-2026-112346 is a critical vulnerability in OpenHands Software Agent SDK, published on 26 Oct 2026.
Official description
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
Weakness: CWE-1327
Which versions are affected by CVE-2026-112346?
How do I fix CVE-2026-112346?
No fix has been published for CVE-2026-112346 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-112346 being exploited?
There is no known exploitation of CVE-2026-112346 in the wild and no public exploit code.
Sources
Also known as GHSA-rp7h-crm7-h5qj.