NVD CRITICAL: CVE-2026-112346 — OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote co...
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSoc
CVE-2026-112346