TI-2026-70824 CVE-2026-108789 · GHSA-wc99-rg5g-w3c8
deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
Priority MEDIUM 56
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2.
deepseek-ai
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
deepseek-ai records in CISA KEVNo deepseek-ai vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-65111 CVE-2026-101078 · GHSA-23q9-h232-4q79
deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation
Priority MEDIUM 55
A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2.
TI-2026-85128 CVE-2026-82033 · GHSA-h3m7-c9pq-7995
Missing authentication in DeepSeek RPC allows command execution
Priority LOW 37
DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including tho…
TI-2026-83554 CVE-2026-120204 · GHSA-qv68-3gfq-wxpc
Path traversal in DeepInfer lets attackers create directories
Priority LOW 28
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter.
TI-2026-65131 CVE-2026-101102 · GHSA-m9ww-cpfc-8cf2
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
Priority LOW 23
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7.
TI-2026-70823 CVE-2026-108788 · GHSA-5mvr-2xwh-9v9q
deepseek-ai deepseek-harness Sandbox spawn sandbox
Priority LOW 21
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2.
TI-2026-65140 CVE-2026-101131 · GHSA-vcc3-4jvw-qx89
deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision
Priority LOW 21
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3.