High severity7.6NVD Advisory· Published Mar 27, 2026· Updated Apr 10, 2026
CVE-2026-33718
CVE-2026-33718
Description
OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the get_git_diff() method at openhands/runtime/utils/git_handler.py:134. The path parameter from the /api/conversations/{conversation_id}/git/diff API endpoint is passed unsanitized to a shell command, allowing authenticated attackers to execute arbitrary commands in the agent sandbox. The user is already allowed to instruct the agent to execute commands, but this bypasses the normal channels. Version 1.5.0 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
openhands-aiPyPI | < 1.5.0 | 1.5.0 |
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/OpenHands/OpenHands/pull/13051nvdIssue TrackingPatchWEB
- github.com/OpenHands/OpenHands/security/advisories/GHSA-7h8w-hj9j-8rjwnvdExploitMitigationVendor AdvisoryWEB
- github.com/advisories/GHSA-7h8w-hj9j-8rjwghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-33718ghsaADVISORY
- docs.python.org/3/library/shlex.htmlnvdTechnical DescriptionWEB
- docs.python.org/3/library/subprocess.htmlnvdTechnical DescriptionWEB
- github.com/pypa/advisory-database/tree/main/vulns/openhands-ai/PYSEC-2026-106.yamlghsaWEB
- owasp.org/www-community/attacks/Command_InjectionnvdTechnical DescriptionWEB
News mentions
0No linked articles in our index yet.