{"id":"CVE-2026-122236","kind":"vulnerability","aliases":["CVE-2026-122236"],"related":[],"title":"OpenHands: landing page lacks authentication, exposing local-network access","description":"A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 1.25.0 will fix this issue. The name of the patch is c5efa3ae415def0a903c82d2b17b748e663b1995. Upgrading the affected component is recommended.","summary":"OpenHands, an AI coding agent platform, has a missing authentication check in its Landing Page component in versions up to 1.24.0. A attacker on the same local network can reach functionality that should require login.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-coding-agent","ai-tooling","local-network","openhands","self-hosted"],"not_affected_if":["no-local-network-access","version-1.25.0-or-later"],"how_to_check":"- Check the installed OpenHands version and confirm whether it is `1.24.0` or earlier.\n- Look for OpenHands instances reachable from the local network without a login prompt.","fix":"- Upgrade OpenHands to `1.25.0`.","status":"open","published_at":"2026-11-05T04:17:12+00:00","first_seen_at":"2026-11-05T04:31:48+00:00","triaged_at":"2026-11-05T04:33:38+00:00","updated_at":"2026-11-05T04:33:38+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-05T04:33:38Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenHands to `1.25.0`.","reach":"network","title":"OpenHands: landing page lacks authentication, exposing local-network access","impact":"medium","summary":"OpenHands, an AI coding agent platform, has a missing authentication check in its Landing Page component in versions up to 1.24.0. A attacker on the same local network can reach functionality that should require login.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["openhands","ai-coding-agent","self-hosted","local-network"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"unauthenticated local network user reaches protected landing page functions","analyst_note":"Check the patch commit and release notes at github.com to confirm what the missing authentication exposes and the default configuration.","how_to_check":"- Check the installed OpenHands version and confirm whether it is `1.24.0` or earlier.\n- Look for OpenHands instances reachable from the local network without a login prompt.","plain_action":"","needs_analyst":true,"not_affected_if":["version-1.25.0-or-later","no-local-network-access"],"who_is_affected":"Teams running OpenHands versions up to 1.24.0 that are reachable from a local network. The sources say the attack must come from within the local network, so instances only exposed to the internet or kept on a single machine are less exposed. unknown for exact default configuration.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000697,"input_tokens":4292,"output_tokens":535,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-122236':13A,16A '-2026':12A,15A '1.24.0':51B,75C '1.25.0':118C 'access':10A 'affect':132C 'agent':20B,35B 'ai':18B,22B,33B 'ai-coding-ag':17B 'ai-tool':21B 'attack':53B,93C 'authent':5A,40B,91C 'c5efa3ae415def0a903c82d2b17b748e663b1995':129C 'carri':96C 'check':41B 'code':19B,34B 'compon':46B,83C,133C 'cve':11A,14A 'disclos':107C 'exploit':104C 'expos':6A 'fix':120C 'found':70C 'function':61B,80C 'host':30B 'impact':77C 'issu':122C 'lack':4A 'land':2A,44B,84C 'lead':88C 'local':8A,25B,57B,101C 'local-network':7A,24B 'login':65B 'manipul':87C 'may':112C 'miss':39B,90C 'must':94C 'name':124C 'network':9A,26B,58B,102C 'openhand':1A,27B,31B,72C 'page':3A,45B,85C 'patch':127C 'platform':36B 'public':110C 'reach':60B 'recommend':135C 'requir':64B 'self':29B 'self-host':28B 'tool':23B 'unknown':79C 'upgrad':115C,130C 'use':114C 'version':48B,117C 'vulner':67C 'within':99C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenHands versions up to 1.24.0 that are reachable from a local network. The sources say the attack must come from within the local network, so instances only exposed to the internet or kept on a single machine are less exposed. unknown for exact default configuration.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aicodingagent","aitooling","localnetwork","medium","openhands","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-05T04:17:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122236","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122236","severity":null,"published_at":"2026-11-05T04:17:12+00:00","modified_at":"2026-11-05T04:17:12+00:00","first_seen_at":"2026-11-05T04:31:48+00:00","fetched_at":"2026-11-05T04:31:48+00:00","note":null}],"documents":[{"id":73066,"url":"https://github.com/OpenHands/OpenHands/commit/c5efa3ae415def0a903c82d2b17b748e663b1995","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":73067,"url":"https://github.com/OpenHands/OpenHands/releases/tag/v1.25.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}