CVE-2026-95183: DeepSeek DeepSeek Harness (dsh) vulnerability

Published Oct 16, 2026

Updated

An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.

Affected Software

1 affected component

DeepSeek DeepSeek Harness (dsh)=c291e796

Event History

Oct 16, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What must an attacker control to exploit this issue?

The attacker needs to supply or influence external content that is crafted to trigger a prompt injection during context compaction.

Which deployments are exposed?

Deployments using the context-compaction feature in DeepSeek Harness at commit c291e796 are affected according to the available information.

Is a default configuration known to be affected?

The available information does not state whether context compaction is enabled by default or whether default installations are affected.

CVE-2026-95183: DeepSeek DeepSeek Harness (dsh) vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker control to exploit this issue?

Which deployments are exposed?

Is a default configuration known to be affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker control to exploit this issue?

Which deployments are exposed?

Is a default configuration known to be affected?