OpenHands

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

OpenHands records in CISA KEV

No OpenHands vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openhands 1 record MEDIUM

Records

2 records

TI-2026-80463 CVE-2026-112346 · GHSA-rp7h-crm7-h5qj

Unauthenticated remote code execution in OpenHands Software Agent SDK

MEDIUM 50

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfac…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01014 Published 2026-10-26 Fixed in 1.52.0 CWE-1327

TI-2026-26097 CVE-2026-33718 · GHSA-7h8w-hj9j-8rjw

OpenHands is Vulnerable to Command Injection through its Git Diff Handler

MEDIUM 46

OpenHands is software for AI-driven development.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02007 Published 2026-03-27 Fixed in 1.5.0 CWE-78

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0