CRITICALCVSS v3.1 9.8Vulnerability
CVE-2026-112346
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
Properties
- First seen
- 2026-10-26T18:32:57+00:00
- Cvss score
- 9.8
- Last seen
- 2026-10-26T18:32:57+00:00
- Euvd assigner
- VulnCheck
- Retrieved at
- 2026-10-26T19:34:22+00:00
- Src batch id
- euvd-20261026T193402Z-08cbe6
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109918
- Score
- 9.8
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-26T19:34:21+00:00
- Euvd vendor
- OpenHands
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-10-26T19:10:44+00:00
- Euvd base score
- 9.3
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Content hash
- 51f8b47ffcb5b0ce75d8f5e07e86ac62df3930f2d32f52f58c459146b60d9c60
- Published at
- 2026-10-26T16:17:14.110
- Euvd updated
- 2026-10-26T18:32:57+00:00
- Last modified
- 2026-10-26T18:39:42.503
- Euvd epss pct
- 0
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph