Threats affecting pkg:github/OpenHands Software Agent SDK

OpenHands Software Agent SDK versions before 1.52.0 have a critical unauthenticated remote code execution vulnerability. The DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with no authentication enabled by default. This allows attackers who can access the container port to execute arbitrary shell commands as root, access mounted workspaces, and read plaintext secrets.