CVE-2026-122236 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
OpenHands, an AI coding agent platform, has a missing authentication check in its Landing Page component in versions up to 1.24.0. A attacker on the same local network can reach functionality that should require login.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams running OpenHands versions up to 1.24.0 that are reachable from a local network. The sources say the attack must come from within the local network, so instances only exposed to the internet or kept on a single machine are less exposed. unknown for exact default configuration.
Not affected if no-local-network-access, version-1.25.0-or-later
Who cares ai-coding-agent, local-network, openhands, self-hosted
1.24.0 or earlier.1.25.0.A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 1.25.0 will fix this issue. The name of the patch is c5efa3ae415def0a903c82d2b17b748e663b1995. Upgrading the affected component is recommended.
This page as .md · .json · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.