Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-108789 (GCVE-0-2026-108789)

Vulnerability from nvd – Published: 2026-10-12 02:15 – Updated: 2026-10-13 14:22

Title

deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow

Summary

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

5.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-13 14:22 UTC

CWE

CWE-841 - Enforcement of Behavioral Workflow
CWE-840 - Business Logic Errors

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

7 references

URL	Tags
https://vuldb.com/vuln/416568	vdb-entrytechnical-description
https://vuldb.com/vuln/416568/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108789	third-party-advisory
https://vuldb.com/submit/959699	third-party-advisory
https://github.com/deepseek-ai/deepseek-harness/d…	related
https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNft…	exploit
https://github.com/deepseek-ai/deepseek-harness/	product

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.1-rc.0 Affected: 0.1.1-rc.1 Affected: 0.1.1-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

ShiyuFan_BinYuan (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-108789",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-13T14:22:30.481471Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-13T14:22:56.082Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "dsh-workflow-worker-thread"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.1-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-841",
              "description": "Enforcement of Behavioral Workflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-840",
              "description": "Business Logic Errors",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T02:15:31.636Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-416568 | deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/416568"
        },
        {
          "name": "VDB-416568 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/416568/cti"
        },
        {
          "name": "CVE-2026-108789 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-108789"
        },
        {
          "name": "Submit #959699 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/959699"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/deepseek-ai/deepseek-harness/discussions/243"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNftYxwk9CchJgGnHc"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/deepseek-ai/deepseek-harness/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-11T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-11T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-11T10:50:20.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-108789",
    "datePublished": "2026-10-12T02:15:31.636Z",
    "dateReserved": "2026-10-11T08:45:05.631Z",
    "dateUpdated": "2026-10-13T14:22:56.082Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108788 (GCVE-0-2026-108788)

Vulnerability from nvd – Published: 2026-10-12 02:00 – Updated: 2026-10-14 17:17

Title

deepseek-ai deepseek-harness Sandbox spawn sandbox

Summary

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-14 17:16 UTC

CWE

CWE-265 - Sandbox Issue
CWE-264 - Improper Access Controls

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/416567	vdb-entrytechnical-description
https://vuldb.com/vuln/416567/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108788	third-party-advisory
https://vuldb.com/submit/959696	third-party-advisory
https://mcniyfj5bw9b.feishu.cn/docx/EMBrd1Ak3oJDF…	exploit

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.1-rc.0 Affected: 0.1.1-rc.1 Affected: 0.1.1-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

ShiyuFan_BinYuan (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-108788",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T17:16:56.334338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T17:17:08.800Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Sandbox"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.1-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-265",
              "description": "Sandbox Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T02:00:56.424Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-416567 | deepseek-ai deepseek-harness Sandbox spawn sandbox",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/416567"
        },
        {
          "name": "VDB-416567 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/416567/cti"
        },
        {
          "name": "CVE-2026-108788 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-108788"
        },
        {
          "name": "Submit #959696 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/959696"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/EMBrd1Ak3oJDFjx48F9cYH0Snnb"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-11T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-11T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-11T10:50:11.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Sandbox spawn sandbox",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-108788",
    "datePublished": "2026-10-12T02:00:56.424Z",
    "dateReserved": "2026-10-11T08:45:01.855Z",
    "dateUpdated": "2026-10-14T17:17:08.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101131 (GCVE-0-2026-101131)

Vulnerability from nvd – Published: 2026-09-28 18:30 – Updated: 2026-09-28 18:47

Title

deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision

Summary

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to reliance on untrusted inputs in a security decision. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-28 18:46 UTC

CWE

CWE-807 - Reliance on Untrusted Inputs in a Security Decision
CWE-20 - Improper Input Validation

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

4 references

URL	Tags
https://vuldb.com/vuln/410988	vdb-entrytechnical-description
https://vuldb.com/vuln/410988/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101131	third-party-advisory
https://vuldb.com/submit/938601	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.5-rc.0 Affected: 0.1.5-rc.1 Affected: 0.1.5-rc.2 Affected: 0.1.5-rc.3 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

Piggy Sprint (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101131",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-28T18:46:46.197681Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T18:47:04.009Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "dsh"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.5-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.2"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.3"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Piggy  Sprint (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to reliance on untrusted inputs in a security decision. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-807",
              "description": "Reliance on Untrusted Inputs in a Security Decision",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T18:30:14.509Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410988 | deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/410988"
        },
        {
          "name": "VDB-410988 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410988/cti"
        },
        {
          "name": "CVE-2026-101131 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101131"
        },
        {
          "name": "Submit #938601 | DeepSeek DeepSeek Harness 0.1.0-rc.5 \u8bbe\u8ba1\u9519\u8bef / Design Error",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/938601"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-28T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-28T09:19:18.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101131",
    "datePublished": "2026-09-28T18:30:14.509Z",
    "dateReserved": "2026-09-28T07:14:06.791Z",
    "dateUpdated": "2026-09-28T18:47:04.009Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101102 (GCVE-0-2026-101102)

Vulnerability from nvd – Published: 2026-09-28 18:00 – Updated: 2026-10-01 14:49

Title

deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

Summary

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

6.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 14:49 UTC

CWE

CWE-265 - Sandbox Issue
CWE-264 - Improper Access Controls

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/410977	vdb-entrytechnical-description
https://vuldb.com/vuln/410977/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101102	third-party-advisory
https://vuldb.com/submit/935737	third-party-advisory
https://vuldb.com/submit/937812	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.0-rc.0 Affected: 0.1.0-rc.1 Affected: 0.1.0-rc.2 Affected: 0.1.0-rc.3 Affected: 0.1.0-rc.4 Affected: 0.1.0-rc.5 Affected: 0.1.0-rc.6 Affected: 0.1.0-rc.7 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

rockmelodeis (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101102",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T14:49:06.264210Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T14:49:20.774Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Code Mode Sandbox"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.0-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.2"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.3"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.4"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.5"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.6"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.7"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "rockmelodeis (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor\u0027s own code, SAFETY.md, and design notes all explicitly state the worker is \"containment, not a security boundary\". The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-265",
              "description": "Sandbox Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T18:00:07.284Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410977 | deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/410977"
        },
        {
          "name": "VDB-410977 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410977/cti"
        },
        {
          "name": "CVE-2026-101102 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101102"
        },
        {
          "name": "Submit #935737 | deepseek-ai deepseek-harness dsh-v0.1.0-rc.7 DeepSeek Harness `run_code` (Code Mode) executes model-written T",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/935737"
        },
        {
          "name": "Submit #937812 | deepseek-ai DeepSeek Harness dsh-v0.1.0-rc.7 Command Injection (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/937812"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-28T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-28T05:04:23.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101102",
    "datePublished": "2026-09-28T18:00:07.284Z",
    "dateReserved": "2026-09-28T02:59:05.372Z",
    "dateUpdated": "2026-10-01T14:49:20.774Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101078 (GCVE-0-2026-101078)

Vulnerability from nvd – Published: 2026-09-28 15:30 – Updated: 2026-09-28 16:26

Title

deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

Summary

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. It is advisable to implement a patch to correct this issue. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

6.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-28 16:26 UTC

CWE

CWE-653 - Improper Isolation or Compartmentalization

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/410949	vdb-entry
https://vuldb.com/vuln/410949/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101078	third-party-advisory
https://vuldb.com/submit/929381	third-party-advisory
https://github.com/Ruoyyy/My_vulnerable/blob/main…	exploit

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.7-rc.0 Affected: 0.1.7-rc.1 Affected: 0.1.7-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

Ruoyyy (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101078",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-28T16:26:33.363683Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T16:26:46.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Landlock Backend"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.7-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.7-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.7-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ruoyyy (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. It is advisable to implement a patch to correct this issue. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "Improper Isolation or Compartmentalization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T15:30:18.661Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410949 | deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/410949"
        },
        {
          "name": "VDB-410949 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410949/cti"
        },
        {
          "name": "CVE-2026-101078 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101078"
        },
        {
          "name": "Submit #929381 | Deepseek deepseek-harness  0.1.0-rc.5 (commit `47f943859b`, 2026-08-13) Linux Sandbox Escape",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/929381"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/Ruoyyy/My_vulnerable/blob/main/SECURITY-MOUNT-ESCAPE.en.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-27T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-27T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-27T19:59:22.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101078",
    "datePublished": "2026-09-28T15:30:18.661Z",
    "dateReserved": "2026-09-27T17:53:25.620Z",
    "dateUpdated": "2026-09-28T16:26:46.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108789 (GCVE-0-2026-108789)

Vulnerability from cvelistv5 – Published: 2026-10-12 02:15 – Updated: 2026-10-13 14:22

Title

deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow

Summary

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

5.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-13 14:22 UTC

CWE

CWE-841 - Enforcement of Behavioral Workflow
CWE-840 - Business Logic Errors

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

7 references

URL	Tags
https://vuldb.com/vuln/416568	vdb-entrytechnical-description
https://vuldb.com/vuln/416568/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108789	third-party-advisory
https://vuldb.com/submit/959699	third-party-advisory
https://github.com/deepseek-ai/deepseek-harness/d…	related
https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNft…	exploit
https://github.com/deepseek-ai/deepseek-harness/	product

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.1-rc.0 Affected: 0.1.1-rc.1 Affected: 0.1.1-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

ShiyuFan_BinYuan (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-108789",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-13T14:22:30.481471Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-13T14:22:56.082Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "dsh-workflow-worker-thread"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.1-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-841",
              "description": "Enforcement of Behavioral Workflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-840",
              "description": "Business Logic Errors",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T02:15:31.636Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-416568 | deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/416568"
        },
        {
          "name": "VDB-416568 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/416568/cti"
        },
        {
          "name": "CVE-2026-108789 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-108789"
        },
        {
          "name": "Submit #959699 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/959699"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/deepseek-ai/deepseek-harness/discussions/243"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNftYxwk9CchJgGnHc"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/deepseek-ai/deepseek-harness/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-11T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-11T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-11T10:50:20.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-108789",
    "datePublished": "2026-10-12T02:15:31.636Z",
    "dateReserved": "2026-10-11T08:45:05.631Z",
    "dateUpdated": "2026-10-13T14:22:56.082Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108788 (GCVE-0-2026-108788)

Vulnerability from cvelistv5 – Published: 2026-10-12 02:00 – Updated: 2026-10-14 17:17

Title

deepseek-ai deepseek-harness Sandbox spawn sandbox

Summary

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-14 17:16 UTC

CWE

CWE-265 - Sandbox Issue
CWE-264 - Improper Access Controls

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/416567	vdb-entrytechnical-description
https://vuldb.com/vuln/416567/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108788	third-party-advisory
https://vuldb.com/submit/959696	third-party-advisory
https://mcniyfj5bw9b.feishu.cn/docx/EMBrd1Ak3oJDF…	exploit

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.1-rc.0 Affected: 0.1.1-rc.1 Affected: 0.1.1-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

ShiyuFan_BinYuan (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-108788",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T17:16:56.334338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T17:17:08.800Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Sandbox"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.1-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.1-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-265",
              "description": "Sandbox Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T02:00:56.424Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-416567 | deepseek-ai deepseek-harness Sandbox spawn sandbox",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/416567"
        },
        {
          "name": "VDB-416567 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/416567/cti"
        },
        {
          "name": "CVE-2026-108788 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-108788"
        },
        {
          "name": "Submit #959696 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/959696"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/EMBrd1Ak3oJDFjx48F9cYH0Snnb"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-11T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-11T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-11T10:50:11.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Sandbox spawn sandbox",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-108788",
    "datePublished": "2026-10-12T02:00:56.424Z",
    "dateReserved": "2026-10-11T08:45:01.855Z",
    "dateUpdated": "2026-10-14T17:17:08.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101131 (GCVE-0-2026-101131)

Vulnerability from cvelistv5 – Published: 2026-09-28 18:30 – Updated: 2026-09-28 18:47

Title

deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision

Summary

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to reliance on untrusted inputs in a security decision. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-28 18:46 UTC

CWE

CWE-807 - Reliance on Untrusted Inputs in a Security Decision
CWE-20 - Improper Input Validation

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

4 references

URL	Tags
https://vuldb.com/vuln/410988	vdb-entrytechnical-description
https://vuldb.com/vuln/410988/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101131	third-party-advisory
https://vuldb.com/submit/938601	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.5-rc.0 Affected: 0.1.5-rc.1 Affected: 0.1.5-rc.2 Affected: 0.1.5-rc.3 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

Piggy Sprint (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101131",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-28T18:46:46.197681Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T18:47:04.009Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "dsh"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.5-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.2"
            },
            {
              "status": "affected",
              "version": "0.1.5-rc.3"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Piggy  Sprint (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to reliance on untrusted inputs in a security decision. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-807",
              "description": "Reliance on Untrusted Inputs in a Security Decision",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T18:30:14.509Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410988 | deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/410988"
        },
        {
          "name": "VDB-410988 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410988/cti"
        },
        {
          "name": "CVE-2026-101131 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101131"
        },
        {
          "name": "Submit #938601 | DeepSeek DeepSeek Harness 0.1.0-rc.5 \u8bbe\u8ba1\u9519\u8bef / Design Error",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/938601"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-28T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-28T09:19:18.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101131",
    "datePublished": "2026-09-28T18:30:14.509Z",
    "dateReserved": "2026-09-28T07:14:06.791Z",
    "dateUpdated": "2026-09-28T18:47:04.009Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101102 (GCVE-0-2026-101102)

Vulnerability from cvelistv5 – Published: 2026-09-28 18:00 – Updated: 2026-10-01 14:49

Title

deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

Summary

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

6.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 14:49 UTC

CWE

CWE-265 - Sandbox Issue
CWE-264 - Improper Access Controls

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/410977	vdb-entrytechnical-description
https://vuldb.com/vuln/410977/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101102	third-party-advisory
https://vuldb.com/submit/935737	third-party-advisory
https://vuldb.com/submit/937812	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.0-rc.0 Affected: 0.1.0-rc.1 Affected: 0.1.0-rc.2 Affected: 0.1.0-rc.3 Affected: 0.1.0-rc.4 Affected: 0.1.0-rc.5 Affected: 0.1.0-rc.6 Affected: 0.1.0-rc.7 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

rockmelodeis (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101102",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T14:49:06.264210Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T14:49:20.774Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Code Mode Sandbox"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.0-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.2"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.3"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.4"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.5"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.6"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.7"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "rockmelodeis (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor\u0027s own code, SAFETY.md, and design notes all explicitly state the worker is \"containment, not a security boundary\". The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-265",
              "description": "Sandbox Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T18:00:07.284Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410977 | deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/410977"
        },
        {
          "name": "VDB-410977 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410977/cti"
        },
        {
          "name": "CVE-2026-101102 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101102"
        },
        {
          "name": "Submit #935737 | deepseek-ai deepseek-harness dsh-v0.1.0-rc.7 DeepSeek Harness `run_code` (Code Mode) executes model-written T",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/935737"
        },
        {
          "name": "Submit #937812 | deepseek-ai DeepSeek Harness dsh-v0.1.0-rc.7 Command Injection (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/937812"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-28T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-28T05:04:23.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101102",
    "datePublished": "2026-09-28T18:00:07.284Z",
    "dateReserved": "2026-09-28T02:59:05.372Z",
    "dateUpdated": "2026-10-01T14:49:20.774Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-101078 (GCVE-0-2026-101078)

Vulnerability from cvelistv5 – Published: 2026-09-28 15:30 – Updated: 2026-09-28 16:26

Title

deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

Summary

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. It is advisable to implement a patch to correct this issue. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

6.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-28 16:26 UTC

CWE

CWE-653 - Improper Isolation or Compartmentalization

Assigner

VulDB CNA under the mitre root

CNA scorecard B 82/100 over 3864 records in the last 180 days details

References

5 references

URL	Tags
https://vuldb.com/vuln/410949	vdb-entry
https://vuldb.com/vuln/410949/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101078	third-party-advisory
https://vuldb.com/submit/929381	third-party-advisory
https://github.com/Ruoyyy/My_vulnerable/blob/main…	exploit

Impacted products

1 product

Vendor	Product	Version
deepseek-ai	deepseek-harness	Affected: 0.1.7-rc.0 Affected: 0.1.7-rc.1 Affected: 0.1.7-rc.2 cpe:2.3:a:deepseek-ai:deepseek-harness::::::::

Credits

Ruoyyy (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101078",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-28T16:26:33.363683Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-28T16:26:46.422Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Landlock Backend"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.7-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.7-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.7-rc.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ruoyyy (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. It is advisable to implement a patch to correct this issue. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "Improper Isolation or Compartmentalization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T15:30:18.661Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410949 | deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/410949"
        },
        {
          "name": "VDB-410949 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410949/cti"
        },
        {
          "name": "CVE-2026-101078 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101078"
        },
        {
          "name": "Submit #929381 | Deepseek deepseek-harness  0.1.0-rc.5 (commit `47f943859b`, 2026-08-13) Linux Sandbox Escape",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/929381"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/Ruoyyy/My_vulnerable/blob/main/SECURITY-MOUNT-ESCAPE.en.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-27T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-27T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-27T19:59:22.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101078",
    "datePublished": "2026-09-28T15:30:18.661Z",
    "dateReserved": "2026-09-27T17:53:25.620Z",
    "dateUpdated": "2026-09-28T16:26:46.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

10 vulnerabilities by deepseek-ai

CVE-2026-108789 (GCVE-0-2026-108789)

CVE-2026-108788 (GCVE-0-2026-108788)

CVE-2026-101131 (GCVE-0-2026-101131)

CVE-2026-101102 (GCVE-0-2026-101102)

CVE-2026-101078 (GCVE-0-2026-101078)

CVE-2026-108789 (GCVE-0-2026-108789)

CVE-2026-108788 (GCVE-0-2026-108788)

CVE-2026-101131 (GCVE-0-2026-101131)

CVE-2026-101102 (GCVE-0-2026-101102)

CVE-2026-101078 (GCVE-0-2026-101078)