CVE-2026-108788: deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running deepseek-ai deepseek-harness version 0.1.1-rc.2 or earlier are affected, but exploitation must be launched from the local host. The vulnerability has a local attack vector and requires low privileges.
What does an attacker need to exploit it?
An attacker needs local access with low privileges and the ability to manipulate the Profile argument passed to the Sandbox component's spawn function. No user interaction is required.
Is there public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.
What should teams do if they cannot immediately patch?
Limit local access and restrict who can invoke or influence the Profile argument used by Sandbox.spawn. Monitor uses of this function for unexpected Profile values, since exploitation depends on argument manipulation.