Medium severity6.3NVD Advisory· Published Oct 26, 2026· Updated Oct 26, 2026

CVE-2026-116367

Description

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

DeepSeek/Harnessllm-fuzzy
Range: <=0.1.0-rc.5

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-116367nvd
vuldb.com/submit/1012736nvd
vuldb.com/vuln/426331nvd
vuldb.com/vuln/426331/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000