62 matches found
CVE-2026-95183
An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...
CVE-2026-95182
An untrusted search path in DeepSeek Harness dsh commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content...
CVE-2026-95182
A vulnerability in DeepSeek Harness (dsh) , specifically in commit c291e796 , involves an untrusted search path (CWE-426). This flaw allows an attacker to achieve arbitrary code execution by supplying and opening crafted executable files that replace legitimate content. The impact is rated as CRI...
EUVD-2026-102903
An untrusted search path in DeepSeek Harness dsh commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content...
PT-2026-115624
An untrusted search path in DeepSeek Harness dsh commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content...
CVE-2026-95182
An untrusted search path in DeepSeek Harness dsh commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content...
EUVD-2026-102906
An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...
CVE-2026-95183
An issue in the context-compaction feature of DeepSeek Harness (dsh) , specifically within commit c291e796 , allows attackers to perform a prompt injection attack . This vulnerability is triggered through the processing of crafted external content . No specific remediation steps or exploit code w...
CVE-2026-108789
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
CVE-2026-108788
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
CVE-2026-108789 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
EUVD-2026-97158
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
CVE-2026-108789 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
CVE-2026-108789
A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The flaw specifically affects the agent function within the dsh-workflow-worker-thread component. The root cause involves improper enforcement of behavioral workflow and business logic errors (CWE-841, CWE-840), whi...
EUVD-2026-97146
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
CVE-2026-108788 deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
CVE-2026-108788
A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The issue is located within the spawn function of the Sandbox component. By manipulating the Profile argument, an attacker can cause a sandbox issue. This attack can be launched on the local host . While the exploit...
PT-2026-110422
Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.1-rc.2 Description A flaw exists in the spawn function of the Sandbox component. Manipulating the Profile argument allows an attacker to cause a sandbox issue, which can be executed on the loc...
CVE-2026-108788: Undefined Security Weakness
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
CVE-2026-108789: Improper Enforcement of Behavioral Workflow
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...