Openhands vulnerabilities

Products

• Openhands 2

Newest

• openhands software agent sdk OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE CVE-2026-112346 9.3 CriticalOctober 26, 2026
• openhands OpenHands send_pull_request.py initialize_repo command injection CVE-2026-19022 5.3 MediumAugust 6, 2026
• openhands OpenHands is Vulnerable to Command Injection through its Git Diff Handler CVE-2026-33718 Public exploitFix available 7.6 HighMarch 25, 2026