OpenHands

Products

ProductCVEsExploitedLatest
OpenHands1–Mar 27, 2026
OpenHands Software Agent SDK1–Oct 26, 2026

Exploited and recent CVEs

  • CVE-2026-112346 Critical 9.8 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE 1.0%
  • CVE-2026-33718 High 7.6 OpenHands is Vulnerable to Command Injection through its Git Diff Handler 2.0%