Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.9
CVE-2026-108788: deepseek-harness sandbox can be bypassed via profile argument
CVE-2026-108788 · published 7 days ago
Summary
The sandbox feature in deepseek-harness versions up to 0.1.1-rc.2 can be tricked by sending a crafted profile value, allowing code to run outside the intended safe area. This could let an attacker execute commands on the local machine. Update to a fixed version or apply the vendor's recommended mitigation as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| deepseek-ai | deepseek-harness | 0.1.1-rc.0 |
Original advisory text
deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-264Permissions, Privileges, and Access Controls
CWE-265Privilege Issues
Timeline
Published12 Oct 2026
Updated14 Oct 2026
First seen12 Oct 2026
Track software like this
Free during beta