deepseek-ai

Products

ProductCVEsExploitedLatest
deepseek-harness6–Nov 4, 2026
DeepInfer1–Oct 31, 2026

Exploited and recent CVEs

  • CVE-2026-82033 High 8.4 DeepSeek Harness Unauthenticated RPC Command Execution 0.2%
  • CVE-2026-120204 Medium 5.6 DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter 0.4%
  • CVE-2026-108789 Medium 5.5 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow 0.2%
  • CVE-2026-108788 Medium 5.3 deepseek-ai deepseek-harness Sandbox spawn sandbox 0.1%
  • CVE-2026-101131 Low 3.3 deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision 0.1%
  • CVE-2026-101102 Medium 6.3 deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox 0.2%
  • CVE-2026-101078 Medium 6.3 deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation 0.1%