Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
① Banks and Blackstone: an SPV buys Broadcom chips and leases them to Anthropic https://investors.broadcom.com/news-releases/news-release-details/bank-america-blackstone-citi-and-morgan-stanley-announce ② DeepSeek V4.1 Flash in Cursor (Cursor's own benchmark) https://x.com/cursor_ai/status/2114839997568405608 ③ OpenHands SDK before 1.52.0: no-auth root exec https://www.cve.org/CVERecord?id=CVE-2026-112346 https://t.co/YYvPNUkFMi
① 은행 3곳·블랙스톤, SPV로 브로드컴 칩 사서 앤트로픽에 임대 https://investors.broadcom.com/news-releases/news-release-details/bank-america-blackstone-citi-and-morgan-stanley-announce ② DeepSeek V4.1 Flash, Cursor 합류. 수치는 Cursor 자체 측정 https://x.com/cursor_ai/status/2114839997568405608 ③ OpenHands SDK 1.52.0 미만 무인증 root 실행 https://www.cve.org/CVERecord?id=CVE-2026-112346 https://t.co/P0SCvQVPnW
🔐 OpenHands Agent SDK 9.8: the sandbox published its own control port to 0.0.0.0 with auth hardcoded to None. No exploit needed. No credential needed. Just a network route to the port. https://threataft.com/articles/openhands-agent-sdk-cve-2026-112346-sandbox-0-0-0-0 #CyberSecurity #ThreatIntel
OpenHands Agent SDK に未認証で任意コードを実行できる脆弱性（CVE-2026-112346、CVSS 9.8）。修正版は 1.52.0 です。AI エージェントの実行基盤として使っている場合は、公開範囲と版数を確認しておきたいところです。 https://cve.autoarticles.net/cve/CVE-2026-112346
🔓 CVE-2026-112346: OpenHands agent SDK <1.52.0 ran its sandbox agent server unauthenticated on 0.0.0.0. Anyone who reached the port could get a root shell and read stored secrets. Fixed in 1.52.0. Pin it and publish sandbox ports on loopback only. https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0
🔒 #CyberSecurity CVE-2026-112346: Critical Unauthenticated RCE in OpenHands Agent SDK Docker Wor… "NVD has published CVE-2026-112346, a CVSS 9.8 (Critical), network-exploitable…" 🔗 https://securityarsenal.com/blog/cve-2026-112346-critical-unauthenticated-rce-in-openhands-agent-sdk-docker-workspaces-detection-and-remediation-guide #CyberSecurity #ThreatIntel #cve2026112346 #critical #cve
🚨 Running AI coding agents on OpenHands' Software Agent SDK? Anyone who can reach the sandbox port could run shell commands as root (CVE-2026-112346) Before 1.52.0, the DockerWorkspace and Apptainer launchers bind the sandbox agent server to 0.0.0.0 with an empty session_api_keys list, so authentication is off by default. CVSS 4.0: 9.3 / CVSS 3.1: 9.8 (CNA, VulnCheck). ⚠️ Impact: unauthenticated HTTP and WebSocket requests can run arbitrary shell commands as root in the sandbox, access the mounted workspace and read plaintext secrets from the secrets store 📦 Affected: OpenHands Software Agent SDK before 1.52.0 🛡️ Fix: upgrade to 1.52.0 (released Oct 5, 2026; Docker ports now published on loopback) and keep sandbox ports off untrusted networks ✅ Known exploited: not confirmed 🔗 https://www.cve.org/CVERecord?id=CVE-2026-112346 #AISecurity #CVE