Full details for this CVE can be found on github.com/edoardottt/openhands-disclosure.