What is the CVSS score and severity of CVE-2026-112346?

CVE-2026-112346 is rated CRITICAL with a CVSS score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) and is classified under CWE-78 (OS Command Injection).

CVE-2026-112346 CRITICAL · CVSS 9.8 · All Hands AI — OpenHands Agent SDK & Runtime · 2026-10-27

CVE-2026-112346: OpenHands Agent Runtime Command Injection

Q: What versions are affected by CVE-2026-112346?

CVE-2026-112346 affects OpenHands SDK < 1.52.0 / OpenHands Runtime < 0.34.2 in OpenHands Agent SDK & Runtime (OpenHands Agent Runtime Command Injection).

Q: How do I patch or remediate CVE-2026-112346?

To remediate CVE-2026-112346, upgrade to the patched release: OpenHands SDK 1.52.0 / OpenHands v0.34.2. Upgrade OpenHands SDK to version 1.52.0+ (or runtime v0.34.2+) across all developer and CI/CD agent runners. Run autonomous coding agents strictly inside ephemeral, unprivileged microVMs or gVisor/Kata sandboxes with no host Docker socket access. Rotate any API keys, Git credentials, or cloud tokens that were mounted inside affected agent runtime environments.

An unauthenticated command injection flaw in the OpenHands AI agent execution bridge allows untrusted repository content or prompt-injected tool arguments to break out of the intended workspace command wrapper and execute arbitrary host/container shell commands.

Identifier

CVE-2026-112346

Vendor / Product

All Hands AI · OpenHands Agent SDK & Runtime

Severity / CVSS

CRITICAL · CVSS 9.8

Vector / CWE

CWE-78 (OS Command Injection)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected

OpenHands SDK < 1.52.0 / OpenHands Runtime < 0.34.2

Patched Version

OpenHands SDK 1.52.0 / OpenHands v0.34.2

Priority

P0 — Immediate Isolation & Upgrade

Executive Summary & Technical Impact

Tracked under CVE-2026-112346 (CWE-78 (OS Command Injection)), this vulnerability affects OpenHands SDK < 1.52.0 / OpenHands Runtime < 0.34.2 and carries a severity score of 9.8 (CRITICAL). Engineering and security operations teams running OpenHands Agent SDK & Runtime should prioritize upgrading to OpenHands SDK 1.52.0 / OpenHands v0.34.2.

Remediation & Patch Guidance

Upgrade OpenHands SDK to version 1.52.0+ (or runtime v0.34.2+) across all developer and CI/CD agent runners.
Run autonomous coding agents strictly inside ephemeral, unprivileged microVMs or gVisor/Kata sandboxes with no host Docker socket access.
Rotate any API keys, Git credentials, or cloud tokens that were mounted inside affected agent runtime environments.

Frequently Asked Questions (CVE-2026-112346)

What versions are affected by CVE-2026-112346?

CVE-2026-112346 affects OpenHands SDK < 1.52.0 / OpenHands Runtime < 0.34.2 in OpenHands Agent SDK & Runtime (OpenHands Agent Runtime Command Injection).

How do I patch or remediate CVE-2026-112346?

Upgrade affected deployments to OpenHands SDK 1.52.0 / OpenHands v0.34.2 and verify the remediation steps listed above.

What is the CVSS score of CVE-2026-112346?

CVE-2026-112346 is rated CRITICAL with a CVSS score of 9.8 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Full TechPulse Investigation

Critical CVEs Hit AI Agent and Cloud Infrastructure: OpenHands SDK RCE, Google MCP Toolbox File Exfiltration, and Consul-k8s ACL Bypass

Three critical advisories published on October 26, 2026 share one lesson: default-open settings in agent sandboxes, MCP servers, and service meshes are an attack surface.

Read full engineering post-mortem (6 min read) →