OpenHands

Record description

OpenHands operates open-source coding-agent environments with an agent-server control endpoint separate from the surrounding container boundary. The 2026 security repair covers both host port binding and optional session keys; a containerized command service bound on a public interface without credentials can expose execution inside the workspace even if the model never produces a malicious instruction. Fix status is supported by the reviewed software change, but broad deployment exposure and victim counts remain unknown.

Explicitly related research (3)

Declared connections