Medium severity · published Oct 12, 2026
CVE-2026-108788
deepseek-ai deepseek-harness Sandbox spawn sandbox
5.3
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
deepseek-harness · deepseek-ai
0.1.1-rc.0; 0.1.1-rc.1; 0.1.1-rc.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108788
vdb-entry
https://vuldb.com/vuln/416567
signature
https://vuldb.com/vuln/416567/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-108788
third-party-advisory
https://vuldb.com/submit/959696
exploit
https://mcniyfj5bw9b.feishu.cn/docx/EMBrd1Ak3oJDFjx48F9cYH0Snnb
More from deepseek-harness
6.3
CVE-2026-101102
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
6.3
CVE-2026-101078
deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation
5.5
CVE-2026-108789
deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
3.3
CVE-2026-101131
deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision