CVE-2026-82033

DeepSeek Harness versions prior to 0.1.2-alpha.2 (specifically commit 3e24087 ) are vulnerable to unauthenticated RPC command execution due to a missing authentication flaw in the web profile HTTP and WebSocket RPC control plane. This allows any local process, including those from different OS us...