CVE-2026-112346Published
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112346 · Microsoft / collected KEV context
cve-program · CVE-2026-112346
- https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0
- https://github.com/OpenHands/software-agent-sdk/pull/5209
- https://github.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861342af9de
- https://www.vulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandbox-agent-server-rce
Related operational evidence
Explicit CVE identifiers- OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE · Newly collected advisory · 26 Oct 2026