A command injection flaw exists in the initialize_repo function in OpenHands/resolver/send_pull_request.py. Unsanitized input supplied to this function can lead to arbitrary shell command execution by a remote actor. The vulnerability can be exploited over the network and may allow an attacker to compromise confidentiality, integrity, or availability by running arbitrary code on the host where OpenHands runs.

OpenHands OpenHands is affected up to the 0.62.0 release; the vulnerability was removed in version 1.7.0. The flaw is present in all earlier releases of the project that include the cited file. No additional vendor or product information is available.

The CVSS base score of 5.3 reflects a medium severity vulnerability. The EPSS score of 1% indicates a low but nonzero exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The description indicates remote exploitation is possible, so the likely attack vector is transmitted by an attacker through an external API or web interface that triggers initialize_repo. Successful exploitation would allow the attacker to execute arbitrary commands, giving full control of the host.