Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-95182: DeepSeek Harness can run malicious code via crafted files
CVE-2026-95182 · published 2 days ago
Summary
DeepSeek Harness may run any code an attacker places in a specially prepared executable file. This means an attacker could take control of the system by convincing a user to open a malicious file. Update to the latest version or only open files from trusted sources to protect your environment.
Original advisory text
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
10.0
Critical
Type
CWE-426Untrusted Search Path
Timeline
Published16 Oct 2026
Updated17 Oct 2026
First seen16 Oct 2026
Track software like this
Free during beta