software_agent_sdk vulnerabilities

CVEs whose affected-version data names the software_agent_sdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112346Critical· 9.8

today

OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with…

▾ MidnightOpenHands · OpenHands Software Agent SDKvia CVEORG