TI-2026-85916 Aliases CVE-2026-123653 GHSA-46pp-w572-hw78

Prompt injection in esengine DeepSeek-Reasonix document discovery

LOW 23CWE-1427Published 2026-11-06 · Updated 2026-11-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

esengine DeepSeek-Reasonix up to and including 2.52.0 is affected. The discoverDocs function in internal/memory/doc.go does not neutralize input used for LLM prompting (CWE-1427), so untrusted content can be mixed into prompts. A remote attacker can exploit this if a user interacts with crafted content. The exploit has been publicly disclosed.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

A security vulnerability has been detected in esengine DeepSeek-Reasonix up to 2.52.0. Affected is the function discoverDocs of the file internal/memory/doc.go. The manipulation leads to improper neutralization of input used for llm prompting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.53.0 is able to address this issue. The identifier of the patch is 4ca33493a673c2788aa8598fbca2b2f47a69e1b8. It is suggested to upgrade the affected component.

Why it matters now

EPSS 0.00215 11th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed DeepSeek-Reasonix (esengine): 2.53.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
esengine	DeepSeek-Reasonix	2.0; 2.1; 2.2; 2.3; 2.4; 2.5; 2.6; 2.7; 2.8; 2.9; 2.10; 2.11; 2.12; 2.13; 2.14; 2.15; 2.16; 2.17; 2.18; 2.19; 2.20; 2.21; 2.22; 2.23; 2.24; 2.25; 2.26; 2.27; 2.28; 2.29; 2.30; 2.31; 2.32; 2.33; 2.34; 2.35; 2.36; 2.37; 2.38; 2.39; 2.40; 2.41; 2.42; 2.43; 2.44; 2.45; 2.46; 2.47; 2.48; 2.49; 2.50; 2.51; 2.52.0	2.53.0	Patch available	CNA

DeepSeek-Reasonix Vendoresengine Affected 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; 2.6; 2.7; 2.8; 2.9; 2.10; 2.11; 2.12; 2.13; 2.14; 2.15; 2.16; 2.17; 2.18; 2.19; 2.20; 2.21; 2.22; 2.23; 2.24; 2.25; 2.26; 2.27; 2.28; 2.29; 2.30; 2.31; 2.32; 2.33; 2.34; 2.35; 2.36; 2.37; 2.38; 2.39; 2.40; 2.41; 2.42; 2.43; 2.44; 2.45; 2.46; 2.47; 2.48; 2.49; 2.50; 2.51; 2.52.0 Fixed in 2.53.0 Patch available CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:esengine:deepseek-reasonix::::::::	—	—	esengine

cpe:2.3:a:esengine:deepseek-reasonix:*:*:*:*:*:*:*:* Versions — — ·esengine

Remediation

Upgrade esengine DeepSeek-Reasonix to version 2.53.0, which contains the fix with patch identifier 4ca33493a673c2788aa8598fbca2b2f47a69e1b8.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Fix · CNA DeepSeek-Reasonix (esengine) Fixed in 2.53.0

Timeline

2026-11-06 Threatist record created from CVE-2026-123653
2026-11-06 Alias added: GHSA-46pp-w572-hw78

References

Exploit 1

https://github.com/ybyu-ieu/agent-security-advisories/blob/main/deepseek-reasonix/deepseek-reasonix-agents-md-prompt-injection-command-execution.md

Patch 2

Other 3

TI-2026-65396 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences