← fix library

CRITICAL

OpenHands agent server exposed to the internet

Why it matters

OpenHands Agent Server is a coding-agent control plane. Without auth on a public interface, strangers can start agent sessions, run tools, and burn your LLM budget.

Fix it — 3 steps

  1. Set session API keys (OH_SESSION_API_KEYS_*) before binding to anything other than localhost.
  2. Bind to 127.0.0.1 for local use; put TLS + an authenticating reverse proxy in front for remote access.
  3. Block the port at the firewall (sudo ufw deny 8000 or your chosen port). Rotate LLM keys if the server sat open.

Verify it’s fixed

curl -m 5 http://YOUR_SERVER_IP:8000/server_info  # strangers should not get title OpenHands Agent Server

References

Not sure if your stack is exposed?

Run the free check — 30 seconds, safe read-only probes.

Scan your stack