CVE-2026-101132: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

CVE-2026-101131: Reliance on Untrusted Inputs in a Security Decision

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2BAPIKEY leads to reliance on untrusted inputs in a security decision. Local access is...

PT-2026-102287

Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.0-rc.8 Description A remote attack can cause a sandbox issue within the Code Mode Sandbox component by manipulating the run code function. The vendor has noted that the worker is intended for...

CVE-2026-101102: Undefined Security Weakness

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

invoice-ocr-poc

invoice-ocr-poc Proof of concept HTTP API: upload a receipt i...

AGATE: Provenance-Based Runtime Defense against Compositional Attacks on LLM Agents

LLM agents can produce harmful effects through sequences of ordinary operations. Judging such actions requires establishing both the authority that permits them and the origin of the data they carry. We present AGATE, an authorization and data-provenance gate at instrumented agent-harness...

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup...

Research on Models Engaging in Genie-Like Behavior

New paper: "Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training." Abstract: We discover a novel and surprising phenomenon of unintentional misalignment in reasoning language models RLMs, which we call self-jailbreaking. Specifically,...

perf-benchmark-poc

Large Model-Based Python Performance Optimization Loop v0.1...

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

A flaw in DeepSeek Harness , DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed agent turn off its own sandbox with a single command. The tool runs an agent's commands inside an operating-system sandbox, so that an agent working on untrusted files...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: OSV:GHSA-8M2G-8CGM-3VCP...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: GHSA-8M2G-8CGM-3VCP...

GHSA-8M2G-8CGM-3VCP DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane API that allows attackers to gain full agent control by supplying a spoofed Host header, as the server validates only the client-supplied Host header value rather than the actual...

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane API that allows attackers to gain full agent control by supplying a spoofed Host header, as the server validates only the client-supplied Host header value rather than the actual...

CVE-2026-82533

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +60 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-host-frontend-static (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-host-frontend-static NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.5, =0.0.1-rc.5, =0.1.1-rc.2 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @ai4paper/dsh-ipaper (>=0.1.0, <=0.1.2) +82 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-client-connection (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-client-connection NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0-rc.8.zw.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@acpus/dsh (0.0.2), @ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8) +61 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-api-gateway (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-api-gateway NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.16 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @apollo-music/dsh-bundle-school-policy-dual-runtime (>=0.1.0, <=0.3.2) +53 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh-web-app (>=0.0.1-rc.5, <=0.1.1-rc.2)

@deepseek-ai/dsh-web-app NPM version =0.0.1-rc.5, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0-rc.8.zw.4, =0.1.0, =0.0.1-rc.5, =0.0.1-rc.5, =0.1.0-rc.5, =0.1.0, =0.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...

@ai-thinker/deepseek-harness-cli (>=0.3.7, <=0.3.8), @apollo-music/dsh-bundle-school-policy-dual-runtime (>=0.1.0, <=0.3.2) +47 more potentially affected by CVE-2026-82533 via @deepseek-ai/dsh (>=0.1.0-rc.6, <=0.1.1-rc.2)

@deepseek-ai/dsh NPM version =0.1.0-rc.6, =0.3.7, =0.1.0, =0.1.0, =0.1.0, =0.0.1-rc.5, =0.1.0-rc.5, =0.1.0, =0.2.0, =0.1.3, =0.2.0, =1.0.20, =0.1.1, =0.2.0 and more Source cves: CVE-2026-82533 Source advisory: MEND:CVE-2026-82533...