Live › vulnerability › CVE-2026-116368
Go to dashboardDeepSeek Harness 0.2.0-rc.0 to 0.2.0-rc.2 has an improper-authorization flaw in its browser-session auth (browser-auth.ts). VulDB reports it is remotely exploitable without authentication, with no public exploit and no vendor response. A public maintainer-repo discussion (#8678) describes a likely related path. The cookie-signing secret sits in plaintext in $DSH_HOME/.credentials.yaml, where a sandboxed agent command can read it. The agent can then forge a valid session cookie, call the local control-plane API, switch itself to danger-full-access and skip approval prompts. That discussion does not cite this CVE.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:31 UTC. All times on this page are UTC.
Teams running DeepSeek Harness (dsh) 0.2.0-rc.0 to rc.2 where the agent processes untrusted content (repos, web pages, MCP output) or the web UI is reachable from other machines. The credentials file is readable inside the workspace-write sandbox, so a prompt-injected agent can escape it. Setups bound only to loopback with no untrusted input are far less exposed. The sources do not confirm whether later builds are fixed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| DeepSeek Harness | other | >= 0.2.0-rc.0, <= 0.2.0-rc.2 | – |
0.2.1-alpha.3, but nothing confirms a fix thereEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116368")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.