AIKIDO-2026-10541
openhands-tools is vulnerable to Denial of service (DoS)
52
Medium Risk
This Affects:
openhands-toolsTL;DR
The default terminal tool stack (openhands/tools/terminal/terminal/terminal_session.py) assumed PS1 / metadata delimiters in command output. When the shell stream did not deliver the expected metadata blocks, completion handling used paths that could assert and end the session instead of returning. That is an availability failure: missing, stripped, or corrupted PS1-related output (including from bugs or an adversary shaping output) can interrupt the session. The patch keeps the tool responsive instead of hard-failing.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
openhands-tools is vulnerable to Denial of service (DoS) in versions 1.0.0 - 1.18.0.
How to fix this
Upgrade the openhands-tools library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant