DeepSeek Harness vulnerabilities

1 known vulnerability in DeepSeek Harness from DeepSeek. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  DeepSeek Harness: Reliance on Untrusted Inputs in a Security Decision

  CVE-2026-82533Sep 8, 2026DeepSeekEPSS 1.24%

  DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection or