Skip to content
OpenAdvisories

Vendor

DeepSeek

4 known vulnerabilities.

Products

DeepSeek Harness 2 Harness 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-82533

    DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing

    DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection o…

    DeepSeek DeepSeek Harness @deepseek-ai/dsh-client-connection npm