CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

The OpenHands Software Agent SDK (versions before 1.52.0 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) . The issue stems from the DockerWorkspace and Apptainer workspace launchers binding the sandbox agent server to all network interfaces (0.0.0.0 ) while using an empty sessio...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

EUVD-2026-109918

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

PT-2026-123400

Name of the Vulnerable Software and Affected Versions OpenHands Software Agent SDK versions prior to 1.52.0 Description An unauthenticated remote code execution issue exists where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0...

OpenHands Software Agent SDK configuration error vulnerability

Versions prior to OpenHands Software Agent SDK 1.52.0 contain a configuration error vulnerability. This vulnerability arises because DockerWorkspace and Apptainer workspace starters bind the sandbox proxy server to all network interfaces, and since sessionapikeys is set to an empty value,...

amazon-ssm-agent-3.3.4268.0-2.1 on GA media (moderate)

amazon-ssm-agent-3.3.4268.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10765-1 Rating: moderate Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2026-41506 SUSE : 7.1...

Design/Logic Flaw

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux Virtual Strage Software Agent component allows local users to gain sensitive information. This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00...

CVE-2022-3191

Hitachi Ops Center Analyzer (Linux) is affected in the Virtual Storage Software Agent component. CVE-2022-3191 describes a vulnerability where sensitive information can be inserted into log files, enabling local users to access sensitive data. Affected versions are 10.8.1-00 through 10.9.0-00. Ro...

CVE-2022-3191: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux Virtual Strage Software Agent component allows local users to gain sensitive information. This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00...

CVE-2021-25695

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver...

CVE-2021-25695

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver...

CVE-2021-25695

The CVE-2021-25695 entry concerns the Teradici PCOIP Software Agent’s USB vHub prior to version 21.07.0, which can accept commands from any program and may allow privilege escalation by altering the vHub driver’s execution flow. Affected component: USB vHub in Teradici PCOIP Software Agent. Root ...

CVE-2021-25695

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver...

CVE-2021-25695: Exposed IOCTL with Insufficient Access Control

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver...

Teradici PCOIP Software Agent security vulnerabilities

The Teradici PCoIP Software Agent is part of the Teradici Cloud Access Software from Teradici Canada. A PCoIP client can be used to connect to virtual desktops either directly or through a connection agent. A security vulnerability exists in the Teradici PCOIP Software Agent that could be exploit...

PT-2021-16761

Name of the Vulnerable Software and Affected Versions Teradici PCOIP Software Agent versions prior to 21.07.0 Description The issue allows an attacker to potentially elevate privileges by altering the program execution flow within the vHub driver, as the USB vHub in the affected software would...