CVE-2026-108789: deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are in scope?
Deployments of deepseek-ai deepseek-harness using versions up to 0.1.1-rc.2 are identified as affected. The affected component is dsh-workflow-worker-thread, specifically its agent function.
What level of access and interaction does exploitation require?
The issue can be exploited remotely with low attack complexity, but the attacker must have low-level privileges and user interaction is required. The supplied vector indicates impacts to confidentiality, integrity, and availability are each low.
Is exploit code available?
Yes. The vulnerability information states that a public exploit is available and may be used.
Has the vendor provided a response or fix?
No vendor response is reported. The vendor was contacted early about the disclosure but did not respond.