CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

EUVD-2026-109918

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

The OpenHands Software Agent SDK (versions before 1.52.0 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) . The issue stems from the DockerWorkspace and Apptainer workspace launchers binding the sandbox agent server to all network interfaces (0.0.0.0 ) while using an empty sessio...

PT-2026-123400

Name of the Vulnerable Software and Affected Versions OpenHands Software Agent SDK versions prior to 1.52.0 Description An unauthenticated remote code execution issue exists where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-115572 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-115585 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-113789 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-113791 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

CVE-2026-96620

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: GHSA-H4MW-J7QP-8MWM...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: OSV:GHSA-H4MW-J7QP-8MWM...

GHSA-H4MW-J7QP-8MWM Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag. An attacker who controlled the resume value could inject an --mcp-config flag defining a stdio MCP server, resulting in...

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag. An attacker who controlled the resume value could inject an --mcp-config flag defining a stdio MCP server, resulting in...

CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

agent-framework-claude (>=1.0.0b260319, <=1.0.0b260521), agent-webkit-server (>=0.1.0, <=0.2.0) +42 more potentially affected by CVE-2026-96620 via claude-agent-sdk (>=0.1.20, <=0.2.120)

claude-agent-sdk PYPI version =0.1.20, =1.0.0b260319, =0.1.0, =0.1.0, =0.1.0, =8.1.0, =0.3.12, =0.3.0, =0.4.0, =0.1.12, =0.4.3, =0.1.0, =0.1.2 - expluro 0.9.0 - glyph-agents 0.3.0 - gobby 0.3.4 - home-agent 0.1.1 and more Source cves: CVE-2026-96620 Source advisory: MEND:CVE-2026-96620...

EUVD-2026-103155

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...