THREATOPS
THREAT OPSThreat News › ZombAI Exploit with OpenHands: Prompt Injection To Remote Code Execution

ZombAI Exploit with OpenHands: Prompt Injection To Remote Code Execution

lowembracetheredPublished 2025-08-10

<a id="top_ref"></a>

<p>Today we have another post about <a href="https://github.com/All-Hands-AI/OpenHands">OpenHands</a> from All Hands AI. It is a popular agent, initially named &ldquo;OpenDevin&rdquo;, and recently the company also provides a <a href="https://www.all-hands.dev/">cloud-based service</a>. Which is all pretty cool and exciting.</p> <h2 id="prompt-injection-to-full-system-comprom

Indicators of compromise

Original source: https://embracethered.com/blog/posts/2025/openhands-remote-code-execution-zombai/