OpenHands vulnerabilities
We track 2 vulnerabilities in OpenHands products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.
2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score
Latest OpenHands vulnerabilities
- 9.8 Critical severity
OpenHands Software Agent SDK: Binding to an Unrestricted IP Address
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_k
- 9.9 Critical severity
OpenHands: Improper Neutralization of Special Elements used in an OS Command
OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversation