Critical severity10.0NVD Advisory· Published Oct 16, 2026· Updated Oct 16, 2026

CVE-2026-95182

Description

An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DeepSeek/Harnessllm-fuzzy
Range: commit c291e796

Patches

Vulnerability mechanics

References

deepseek.comnvd
gist.github.com/lkloliver/46a88c7d619e487327a1122c20ff8e32nvd
github.com/lkloliver/poc/tree/main/CVE-2026-95182nvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000