OpenHands leaves coding-agent sandboxes on 0.0.0.0 with authentication off by default
Default OpenHands workspaces published a root shell on every interface until 1.52.0 bound loopback and required a session key.
Read the piecePublished Frontier reporting tagged “sandbox”.
3 articles · Full archive · Topics
3 recent pieces
Default OpenHands workspaces published a root shell on every interface until 1.52.0 bound loopback and required a session key.
Read the pieceNew releases, then the constraint.