A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. This vulnerability affects local host environments using deepseek-ai deepseek-harness. Defenders should assess exposure and verify the affected version. The CVE record and NVD entry [truncated]
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Defenders should assess exposure and prioritize verification of affected versions in [truncated]