CVE-2026-101102: deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The affected component is the Code Mode Sandbox's run_code function in deepseek-ai deepseek-harness through version 0.1.0-rc.7. The available data does not identify a configuration requirement or a fixed version.
What level of access does an attacker need?
Exploitation can be performed remotely and requires low privileges. No user interaction is required.
Is the sandbox intended to provide a security boundary?
No. The vendor's SAFETY.md and design notes explicitly characterize the worker as containment rather than a security boundary. Deployments should not rely on this sandbox alone to isolate untrusted code.