DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

A flaw in DeepSeek Harness , DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed agent turn off its own sandbox with a single command. The tool runs an agent's commands inside an operating-system sandbox, so that an agent working on untrusted files...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: OSV:GHSA-8M2G-8CGM-3VCP...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: GHSA-8M2G-8CGM-3VCP...

CVE-2026-82533

creationtimestamp| type| source ---|---|--- 2026-09-08 18:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmk6h2va2f 2026-09-08 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muztuwza352f 2026-09-09 12:54:10+00:00| seen|...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...