OpenHands

*High priority issues to fix — 2026-10-29*
1. <https://github.com/OpenHands/OpenHands/issues/18102|OpenHands/OpenHands#18102> — Virtualize the conversation message list [high]
   Why: fix is ready — PR <https://github.com/OpenHands/OpenHands/pull/17820|#17820> open, mergeable, checks green, awaiting review from <@U06PYTVAES1> and <@U0A9RLDPQU8>; unassigned
2. <https://github.com/OpenHands/OpenHands/issues/17949|OpenHands/OpenHands#17949> — Launcher: --allow-lan-session-key ignored, port-in-use error printed twice [high]
   Why: PR <https://github.com/OpenHands/OpenHands/pull/18363|#18363> open, checks green, authored by <@U06PYTVAES1>; unassigned
3. <https://github.com/OpenHands/OpenHands/issues/17878|OpenHands/OpenHands#17878> — Unauthenticated session-key disclosure leading to RCE [high]
   Why: security, remote code execution; no PR open; unassigned
4. <https://github.com/OpenHands/OpenHands/issues/16492|OpenHands/OpenHands#16492> — Backend API keys in origin-readable localStorage [high]
   Why: security, all keys readable by any same-origin script; assigned to <@U0AAND8MJ9Z>
5. <https://github.com/OpenHands/OpenHands/issues/16727|OpenHands/OpenHands#16727> — Conversation corrupted after VM restart: "Missing event file" [high]
   Why: data loss; PR <https://github.com/OpenHands/OpenHands/pull/16806|#16806> open but CI failing; unassigned
_Generated by OpenHands AI on behalf of the user._

I'm reviewing the 18102 :slightly_smiling_face: But it is hughe :_(

Ahh. May I suggest to tell your agents to use verify-openhands and control-openhands to test it in any way and prove beyond any doubt that it works in all scenarios?

There's a lot they can do, because they can fill a conversation with messages and test patiently :slightly_smiling_face:

If you don't have confidence in them... :thinking_face: it would be interesting to know why, maybe we can fix control- and verify- so that you can have confidence in their runs?

Also, if you feel it's easier, maybe have your agents remake it at your direction