OpenHands

v1.7.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agent artificial-intelligence chatgpt claude-ai cli developer-tools

+2 more

llm openai

Summary

AI summary

Dependency updates resolved multiple CVEs.

Full changelog

Added LLM model on conversation cards and header by @sjathin in https://github.com/OpenHands/OpenHands/pull/13616
Added SANDBOX_KVM_ENABLED environment variable to enable passing /dev/kvm to sandbox containers. When enabled, sandboxes can run KVM-accelerated virtual machines instead of using slower emulation by @gpothier in https://github.com/OpenHands/OpenHands/pull/13618
Exposed SDK settings schema to OpenHands by @neubig in https://github.com/OpenHands/OpenHands/pull/13306

Moved Tavily search key to MCP settings by @neubig in https://github.com/OpenHands/OpenHands/pull/14000

@gpothier made their first contribution in https://github.com/OpenHands/OpenHands/pull/13618
@Ricardo-M-L made their first contribution in https://github.com/OpenHands/OpenHands/pull/13817
@buyua9 made their first contribution in https://github.com/OpenHands/OpenHands/pull/13802
@octo-patch made their first contribution in https://github.com/OpenHands/OpenHands/pull/13996
@JefferyLiu6 made their first contribution in https://github.com/OpenHands/OpenHands/pull/13890
@xsfX20 made their first contribution in https://github.com/OpenHands/OpenHands/pull/13708

Full Changelog: https://github.com/OpenHands/OpenHands/compare/1.6.0...1.7.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenHands

Get notified when new releases ship.

About OpenHands

OpenHands: AI-Driven Development