CVE-2026-82033 DeepSeek Harness Unauthenticated RPC Command Execution

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different OS user, to reach unauthenticated session methods...

CVE-2026-82033

DeepSeek Harness versions prior to 0.1.2-alpha.2 (specifically commit 3e24087 ) are vulnerable to unauthenticated RPC command execution due to a missing authentication flaw in the web profile HTTP and WebSocket RPC control plane. This allows any local process, including those from different OS us...