The OpenHands SDK bound its sandbox port to all interfaces by default, handing out root RCE with no authentication

CVE-2026-112346, published on October 26, 2026 and rated CVSS 9.8, shows that the DockerWorkspace and Apptainer launchers in the OpenHands SDK exposed the sandbox server on 0.0.0.0 with authentication disabled by default. Upgrade to version 1.52.0, which confines the port to the loopback, and check that no sandbox is still reachable from the internet.