CVE-2026-82033 DeepSeek Harness Unauthenticated RPC Command Execution

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different OS user, to reach unauthenticated session methods...

CVE-2026-82033

DeepSeek Harness versions prior to 0.1.2-alpha.2 (specifically commit 3e24087 ) are vulnerable to unauthenticated RPC command execution due to a missing authentication flaw in the web profile HTTP and WebSocket RPC control plane. This allows any local process, including those from different OS us...

PT-2026-114411

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create req of the file python/sglang/srt/session/session controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...