Description
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
Critical · 10.0
CVE-2026-95182
EUVD-2026-102903GHSA-g5wx-c65h-w9px
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening cra…
Published Oct 16, 2026 · Updated Oct 16, 2026 · Assigned by mitre