CVE-2026-122236 | OpenHands up to 1.24.0 Landing Page missing authentication (Issue 17878)

November 4, 2026 Yanac

A vulnerability described as critical has been identified in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication.

This vulnerability is listed as CVE-2026-122236. The attack must be carried out from within the local network. In addition, an exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More