ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0430

ACVE-2026-0430

DeepSeek Harness dsh 0.1.1-rc.2 and earlier, running a coding agent in its sandbox, let the agent disable its own confinement and write outside the session workspace.

Exposure

Harness
DeepSeek Harness (dsh) 0.1.1-rc.2 and earlier — confirmed, www.ox.security
Model
any — unconfirmed
Goal
Any coding-agent task run inside the DeepSeek Harness sandbox (goal not stated by the source) — unconfirmed
Tools and settings
The local agent-control API and the operating-system sandbox — confirmed, www.ox.security
Approval
The agent-control API accepts the request without authenticating the caller — confirmed, www.ox.security
Input controlled by
unknown
What the agent does
The agent disables its sandbox and writes outside the session workspace.
Harm
arbitrary-command
Reach
Files outside the session workspace — confirmed, www.ox.security (project files)

Reproducibility: partial (vulnerable components are not confirmed obtainable; trigger not published)

Severity
CRITICAL
Status
Unverified
Kind
Code
Source date
2026-09-08
Modified
2026-09-25
Aliases
CVE-2026-82533
Affected
  • AgentHarness: deepseek-harness — < 0.1.2-alpha.1
Harness/product
deepseek-harness
Classes
sandbox-escape; auth-bypass; CWE-807
Taxonomy
ASI: ASI05; ASI: ASI03; ATLAS: AML.T0105
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

ClaimStatusSourceChecked
Identifier CVE-2026-82533Confirmedcveawg.mitre.org2026-09-24
Fixed in 0.1.2-alpha.1Confirmedcveawg.mitre.org2026-09-24
Severity CRITICAL; matches CNAConfirmedcveawg.mitre.org2026-09-24

In the wild

demonstrated

Description

What

OX Security reported that DeepSeek Harness exposed an unauthenticated local agent-control API and trusted a client-supplied host value. A sandboxed agent could therefore escape its confinement and affect files outside the session workspace.

Detection

OX Security demonstrated the escape and reported CVE-2026-82533.

Fix

Upgrade DeepSeek Harness to 0.1.2-alpha.1 or later.

Fix

Upgrade DeepSeek Harness to 0.1.2-alpha.1 or later.

  • Upgrade harness:deepseek-harness to 0.1.2-alpha.1. Remediation stated by OX Security. Owner: operator

Report a problemJSON