Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
openhands/openhands
main @ ceef693
145
Fixes
1
CVEs
CRITICAL
Peak severity
45.5%
Coverage
Highlights
Denial of Service: 49 prior fixes. Scrutinize any change in this area.
enterprise/server/routes/auth.py: most-fixed (5 issues). Treat as high-risk during review.
50 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: Unsanitized repository paths or branch names passed to git commands allow authenticated users to execute arbitrary commands inside the sandbox or host, as tracked by CVE-2026-33718.
Auth Bypass: Websocket connections historically established sessions without robust cookie validation or by bypassing HTTP Authorization checks, enabling unauthorized connection hijacking.
Path Traversal: File operations and workspace utilities lacked canonicalization and prefix checks, allowing agent tasks to traverse outside the designated workspace base directory.