CVE-2026-45311

The CVE concerns the DeepSeek-TUI run_tests tool, where versions 0.3.0–0.8.23 auto-run cargo test without user approval, enabling execution of arbitrary code via test code and build scripts. The root cause is that tests are auto-approved, allowing attacker-controlled test code in a malicious repo...

CVE-2026-45311

creationtimestamp| type| source ---|---|--- 2026-05-09 04:06:06+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-wx44-2q6h-j6p8 2026-05-28 19:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwpgfojvr2c 2026-05-28...