CVE-2026-112346

{
  "etk_id": "ETK-2026-2663",
  "cve_id": "CVE-2026-112346",
  "display_id": "CVE-2026-112346",
  "ghsa_id": "GHSA-rp7h-crm7-h5qj",
  "euvd_id": "EUVD-2026-109918",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated remote code execution in OpenHands SDK",
  "summary": "OpenHands Software Agent SDK versions before 1.52.0 can expose the sandbox agent through DockerWorkspace or Apptainer launchers without authentication. An attacker able to reach the published container port may run commands in the sandbox and access mounted workspace data or stored secrets.",
  "mitigation": "Upgrade OpenHands Software Agent SDK to version 1.52.0 or later. Until upgraded, restrict access to published sandbox-agent container ports to trusted networks.",
  "vendor": "OpenHands",
  "product": "OpenHands Software Agent SDK",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.52.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.52.0"
      ],
      "package_name": "OpenHands Software Agent SDK",
      "purl": null
    }
  ],
  "cwes": [
    1327
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 44.781559183333336,
  "t0_at": "2026-10-26T15:34:30.749000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-26T15:34:30.749000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-26T15:34:30.749000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112346"
    }
  }
}