TI-2026-80467 CVE-2026-116368 · GHSA-4m7q-ghvx-6vx5
Improper authorization in DeepSeek browser authentication
Priority LOW 37
A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2.
Vulnerabilities
6 records
TI-2026-80466 CVE-2026-116367 · GHSA-87qr-qp63-3pcq
Access control flaw in DeepSeek sandbox createContext
Priority MEDIUM 57
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5.
TI-2026-65141 CVE-2026-101132 · GHSA-rh7q-h525-wx9f
DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal
Priority MEDIUM 45
A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2.
TI-2026-56891 CVE-2026-82533 · GHSA-8m2g-8cgm-3vcp
DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
Priority MEDIUM 45
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of…
TI-2025-39472 CVE-2025-63872 · GHSA-6qf7-f2m4-35xq
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript…
Priority LOW 27
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
TI-2025-19267 CVE-2025-26210 · GHSA-v669-8m26-4r4w
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the…
Priority HIGH 73
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain.