Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversation_id}/git/diff` API endpoint is passed unsanitized to a shell command, allowing authenticated attackers to execute arbitrary commands in the agent sandbox. The user is already allowed to instruct the agent to execute commands, but this bypasses the normal channels. Version 1.5.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-27 | 2 | Disclosure2 |
| 2026-04-10 | 1 | Patch1 |
| 2026-08-27 | 1 | Patch1 |
OpenHands released v1.16.0 today. Before looking at the feature list, check the version boundary. Its official advisory for CVE-2026-33718 lists OpenHands 1.4.0 and earlier as affected by command injection in the Git diff handler. The fix landed in 1.5.0.
Post summary
OpenHands CVE-2026-33718 is a command injection flaw in the Git diff handler affecting <1.5.0, fixed in 1.5.0; users should upgrade to the patched version.
CVE-2026-33718 OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runt… https://www.cve.org/CVERecord?id=CVE-2026-33718
Post summary
CVE-2026-33718 is disclosed as a command injection flaw in OpenHands' get_git_diff() method, with no proof of concept, exploitation, or patch details provided.
🚨 HIGH: CVE-2026-33718 (CVSS 7.6) - Command Injection in OpenHands AI dev platform v1.5.0+. Authenticated attackers can execute arbitrary commands via unsanitized path parameter. Patch available in v1.5.0. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/wwCQqa9Ap5
Post summary
A command‑injection vulnerability (CVE-2026-33718) affecting OpenHands AI platform has been disclosed, with a patch released in v1.5.0; no proof of concept, exploit, or active exploitation claims are present.
⚡ New CVE Alert: CVE-2026-33718 📊 Severity: 7.6 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33718 #CVE-2026-33718 #CVE #High #CyberSecurity #InfoSec https://t.co/BC4NC9nZCh
Post summary
A new CVE (CVE-2026-33718) has been announced with a severity of 7.6 and high risk, affecting multiple unspecified products, but no PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openhands | openhands | - | python | - |