PatchSiren

deepseek-ai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW deepseek-ai CVE published 2026-10-12

CVE-2026-108788

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. This vulnerability affects local host environments using deepseek-ai deepseek-harness. Defenders should assess exposure and verify the affected version. The CVE record and NVD entry [truncated]

MEDIUM deepseek-ai CVE published 2026-10-12

CVE-2026-108789

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Defenders should assess exposure and prioritize verification of affected versions in [truncated]