{"metadata": {"vulnerability": "CVE-2026-112346", "count": 15, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-21T00:00:00Z", "date_only": false, "value": "2026-09-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112346", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T14:41:46.702Z", "date_only": false, "value": "2026-10-19T14:41:46.702Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112346", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T15:34:30.749Z", "date_only": false, "value": "2026-10-26T15:34:30.749Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112346", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T15:34:30.749Z", "date_only": false, "value": "2026-10-26T15:34:30.749Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112346", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T15:34:30.749Z", "date_only": false, "value": "2026-10-26T15:34:30.749Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112346", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T15:52:52.705Z", "date_only": false, "value": "2026-10-26T15:52:52.705579Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117508012190798456", "record": "CVE-2026-112346", "field": "creation_timestamp", "uuid": "b2ed5314-1573-4911-b3e7-29770bf71cd3", "content": "CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112346https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.52.0https://github.com/OpenHands/software-agent-sdk/pull/5209https://github.com/OpenHands/software-agent-sdk/commit/7b66584ff8899144eb4ce679c2811861342af9dehttps://www.vulncheck.com/advisories/openhands-software-agent-sdk-unauthenticated-sandbox-agent-server-rce#OpenHands #OpenHandsSoftwareAgentSDK#CVE_2026_112346#bot", "url": "https://infosec.exchange/users/cve/statuses/117508012190798456"}, {"timestamp": "2026-10-26T16:17:14Z", "date_only": false, "value": "2026-10-26T16:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RP7H-CRM7-H5QJ", "record": "GHSA-RP7H-CRM7-H5QJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T16:17:14.110Z", "date_only": false, "value": "2026-10-26T16:17:14.110", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112346", "record": "FKIE_CVE-2026-112346", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T17:10:04.338Z", "date_only": false, "value": "2026-10-26T17:10:04.338194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mys7ndimwf2y", "record": "CVE-2026-112346", "field": "creation_timestamp", "uuid": "7ee8af89-571b-4787-8d87-3990588216d2", "content": "CVE-2026-112346\nVersions of OpenHands Software Agent SDK older than 1.52.0 run a hidden server that accepts commands from anyone who can reach its network port. This lets an attacker run commands as the system\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mys7ndimwf2y"}, {"timestamp": "2026-10-26T18:07:57.867Z", "date_only": false, "value": "2026-10-26T18:07:57.867364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myscuucfe72w", "record": "CVE-2026-112346", "field": "creation_timestamp", "uuid": "96496157-07c2-41d0-9b18-f3c8f8f02699", "content": "\ud83d\udea8 CVE-2026-112346 \u2014 CVSS 9.3 CRITICAL\n\nOpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-112346\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myscuucfe72w"}, {"timestamp": "2026-10-26T18:32:57Z", "date_only": false, "value": "2026-10-26T18:32:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RP7H-CRM7-H5QJ", "record": "GHSA-RP7H-CRM7-H5QJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T18:32:57Z", "date_only": false, "value": "2026-10-26T18:32:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RP7H-CRM7-H5QJ", "record": "GHSA-RP7H-CRM7-H5QJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-26T18:35:47.969Z", "date_only": false, "value": "2026-10-26T18:35:47.969625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3mysegn6x4l2c", "record": "CVE-2026-112346", "field": "creation_timestamp", "uuid": "589df08f-8b91-47c3-9e05-30601e97272c", "content": "\ud83d\udea8 Critical: CVE-2026-112346 in OpenHands Software Agent SDK, CVSS 9.3. OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the\u2026 No public exploit reported yet. #CVE #infosec\n\nthreatroundup.com/cve/cve-2026...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3mysegn6x4l2c"}, {"timestamp": "2026-10-26T18:39:42.503Z", "date_only": false, "value": "2026-10-26T18:39:42.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112346", "record": "FKIE_CVE-2026-112346", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-26T18:51:22.581Z", "date_only": false, "value": "2026-10-26T18:51:22.581586Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117508714045194615", "record": "cve-2026-112346", "field": "creation_timestamp", "uuid": "bfa986f1-ccec-43a5-9a22-a002b93873cb", "content": "JFC\nhttps://nvd.nist.gov/vuln/detail/cve-2026-112346\n\nOpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.", "url": "https://infosec.exchange/users/cR0w/statuses/117508714045194615"}], "metrics": {"as_of": "2026-11-04T13:13:00.611Z", "anchors": {"origin": {"timestamp": "2026-09-21T00:00:00Z", "date_only": false, "value": "2026-09-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112346", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-21T00:00:00Z", "date_only": false, "value": "2026-09-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112346", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3849180.611161, "hours": 1069.2168364336112, "days": 44.55070151806713, "min_seconds": 3762780.611161, "max_seconds": 3849180.611161, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-21T00:00:00Z", "date_only": false, "value": "2026-09-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-112346", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T13:13:00.611Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}