OpenHands leaves coding-agent sandboxes on 0.0.0.0 with authentication off by default
Default OpenHands workspaces published a root shell on every interface until 1.52.0 bound loopback and required a session key.
Read the piece#cve 2026 112346
One published Frontier piece on this subject — open it below.
1 article · Full archive · Topics
Read this piece
This tag currently points at a single story.
One brief a week.
New releases, then the constraint.