Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#openhands

1 articles

Deep Dive

OpenHands Software Agent SDK Unauthenticated Sandbox RCE (CVE-2026-112346)

The OpenHands Software Agent SDK exposes its sandbox agent port on every interface with auth off by default, allowing root commands; 1.52.0 fixes Docker but not Apptainer.

Ostorlab Team
Oct 27, 2026