CVE-2026-108789

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...

CVE-2026-108788

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...

EUVD-2026-97158

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...

CVE-2026-108789

A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The flaw specifically affects the agent function within the dsh-workflow-worker-thread component. The root cause involves improper enforcement of behavioral workflow and business logic errors (CWE-841, CWE-840), whi...

CVE-2026-108789 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...

CVE-2026-108789 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...

PT-2026-110422

Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.1-rc.2 Description A flaw exists in the spawn function of the Sandbox component. Manipulating the Profile argument allows an attacker to cause a sandbox issue, which can be executed on the loc...

CVE-2026-108789: Improper Enforcement of Behavioral Workflow

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...

CVE-2026-101102 deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

PT-2026-102308

Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.5-rc.3 Description A security issue exists in the dsh component within the file packages/e2b/e2b/src/index.ts. The manipulation of the E2B API KEY argument leads to a security decision based o...

CVE-2026-101078: Improper Isolation or Compartmentalization

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: OSV:GHSA-8M2G-8CGM-3VCP...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: GHSA-8M2G-8CGM-3VCP...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +60 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-host-frontend-static (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-host-frontend-static NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.5, =0.0.1-rc.5, =0.1.1-rc.2 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@acpus/dsh (0.0.2), @ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8) +61 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-api-gateway (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-api-gateway NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.16 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @apollo-music/dsh-bundle-school-policy-dual-runtime (>=0.1.0, <=0.3.2) +53 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-web-app (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-web-app NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.5, =0.1.0-rc.5, =0.1.0, =0.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @apollo-music/dsh-bundle-school-policy-dual-runtime (>=0.1.0, <=0.3.2) +47 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh (>=0.1.0-rc.6, <=0.1.1-rc.2)

@deepseek-ai/dsh NPM version =0.1.0-rc.6, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.0.1-rc.5, =0.1.0-rc.5, =0.1.0, =0.2.0, =0.1.3, =0.2.0, =1.0.20, =0.1.1, =0.2.0 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

my-dshrness-aipentest

DSH PenTest Workflow v4.2 A multi-agent penetration testing w...

South Korea Suspends DeepSeek AI Downloads Over Privacy Violations

South Korea has formally suspended new downloads of Chinese artificial intelligence AI chatbot DeepSeek in the country until the service makes changes to its mobile apps to comply with data protection regulations. Downloads have been paused as of February 15, 2025, 6:00 p.m. local time, the...