Medium severity · published Sep 28, 2026
CVE-2026-101102
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
deepseek-harness · deepseek-ai
0.1.0-rc.0; 0.1.0-rc.1; 0.1.0-rc.2; 0.1.0-rc.3; 0.1.0-rc.4; 0.1.0-rc.5; +2 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-101102
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-101102
vdb-entry
https://vuldb.com/vuln/410977
signature
https://vuldb.com/vuln/410977/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-101102
third-party-advisory
https://vuldb.com/submit/935737
third-party-advisory
https://vuldb.com/submit/937812
More from deepseek-harness
6.3
CVE-2026-101078
deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation
5.5
CVE-2026-108789
deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
5.3
CVE-2026-108788
deepseek-ai deepseek-harness Sandbox spawn sandbox
3.3
CVE-2026-101131
deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision