← Back

CVE-2026-33718

nvd nist
Published: Mar 27, 2026Modified: Apr 10, 2026

JSON object

Loading...
9.9
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.1 / Impact: 6.0
Source: NVD

Description

OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversation_id}/git/diff` API endpoint is passed unsanitized to a shell command, allowing authenticated attackers to execute arbitrary commands in the agent sandbox. The user is already allowed to instruct the agent to execute commands, but this bypasses the normal channels. Version 1.5.0 fixes the issue.

Affected (1)

Products: Openhands: Openhands
Openhands
1 product
Openhands
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openhands
Before 1.5.0

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (5)

Source: security-advisories@github.com
Technical Description
Source: security-advisories@github.com
Technical Description
Source: security-advisories@github.com
Issue TrackingPatch
Source: security-advisories@github.com
ExploitMitigationVendor Advisory
Source: security-advisories@github.com
Technical Description

Timeline

No history available yet.