OpenHands releases 1.7.0: KVM acceleration sandbox, SDK settings schema and multiple CVE fixes
OpenHands 1.7.0 adds a new KVM acceleration sandbox switch, session cards display model names, exposes SDK settings Schema, and fixes multiple CVEs through dependency upgrades.
OpenHands 1.7.0: Sandbox speed-up, model visibility, and a batch of CVEs added
OpenHands Release 1.7.0. The three lines of this version are very clear: make the sandbox run faster, make the running status more transparent, and make up for the security debt.
Quick Facts
| Type | Content |
|---|---|
| New | KVM acceleration sandbox switch SANDBOX_KVM_ENABLED |
| New | LLM model used for session cards/header display |
| New | Exposing SDK settings Schema to OpenHands |
| Changes | Tavily search keys migrated to MCP settings |
| Fix | Dependency upgrade to fix multiple CVEs and fix multiple UIs |
Performance: Leave KVM to the sandbox
The new SANDBOX_KVM_ENABLED can pass the host's /dev/kvm into the sandbox container to enable KVM to accelerate the virtual machine. Compared to slow simulation, this is a real speedup for heavier tasks - provided the host kernel and permissions support KVM.
Transparency and Security: Pay both ends.
In terms of observability, session cards and headers now directly display the currently used LLM model, eliminating the need to guess when debugging; at the same time, the SDK setting schema is exposed to the outside world. In terms of configuration, Tavily search keys are moved to MCP settings management. On the security side, multiple CVEs were repaired through dependency upgrades, and a number of UI issues were fixed.
Enable manifest
- Set
SANDBOX_KVM_ENABLEDon the host that supports KVM to ensure that the container can access/dev/kvm. - Migrate Tavily search keys to MCP settings to avoid invalidation of old configurations.
- Cloud environments may not be open to KVM; the complete CVE list and changes are subject to the official release notes.
Reviews