CVE-2026-95182: DeepSeek Harness (dsh) vulnerability

Published Oct 16, 2026

Updated

An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.

Affected Software

1 affected component

DeepSeek Harness (dsh)=c291e796

Event History

Oct 16, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

The attacker needs to supply a crafted executable file and have it opened in place of legitimate content. Successful exploitation can result in arbitrary code execution.

How can I determine whether my deployment is affected?

The affected implementation is identified as DeepSeek Harness (dsh) commit c291e796. Compare the commit used by your deployment with that identifier.

CVE-2026-95182: DeepSeek Harness (dsh) vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

How can I determine whether my deployment is affected?