{"data":{"id":"32e86674-b0f0-4eb3-b165-ec147be2353c","title":"CVE-2026-33718: OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in…","summary":"CVE-2026-33718 affects OpenHands starting in version 1.5.0. The `path` parameter of the `/api/conversations/{conversation_id}/git/diff` endpoint is passed unsanitized to a shell command in `get_git_diff()` at `openhands/runtime/utils/git_handler.py:134`. An authenticated attacker can execute arbitrary commands in the agent sandbox, bypassing the normal channels through which the user may already instruct the agent to run commands.","solution":"Fixed in 1.5.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-33718","publishedAt":"2026-03-27T01:16:19.483Z","cveId":"CVE-2026-33718","cweIds":["CWE-78"],"cvssScore":"7.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openhands-ai@>= 0, < 1.5.0 (fixed: 1.5.0)"],"affectedPackageNames":["openhands-ai"],"affectedPackageRefs":["pypi:openhands-ai"],"affectedVendors":[],"affectedVendorsRaw":["OpenHands"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenHands command injection in git diff endpoint path parameter","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.02007,"epssCheckedAt":"2026-11-09T12:10:44.315Z","kevDateAdded":null,"advisoryAliases":["GHSA-7h8w-hj9j-8rjw"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:12.110Z","patchAvailable":true,"disclosureDate":"2026-03-27T01:16:19.483Z","fixReleasedAt":"2026-03-11T15:51:02.195Z","daysToFix":-16,"fixCheckedAt":"2026-10-29T21:39:26.923Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"openhands-ai","fixedVersion":"1.5.0","matchedVersion":"1.5.0","fixReleasedAt":"2026-03-11T15:51:02.195Z","daysToFix":-16,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:39:26.779Z"}]}}