CVE-2026-82533

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82533
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82533.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82533
Published
2026-09-08T16:59:47Z
Modified
2026-09-12T03:30:19Z
Severity
  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
Details

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a confined tool-executed process can reach the loopback API without any port exposure and use it to escape its own OS sandbox, escalate to unconfined execution, and disable the approval prompt. When the port is externally reachable via tunnel, SSH forward, or reverse proxy, a remote attacker can exploit the same flaw to create sessions, execute arbitrary commands, and exfiltrate stored conversation transcripts without credentials.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-807"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82533.json"
}
References

Affected packages

Git / github.com/deepseek-ai/deepseek-harness

Affected ranges

Type
GIT
Repo
https://github.com/deepseek-ai/deepseek-harness
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
cd5ef8148158c3a752a658978873241fdf8e2bbc
Fixed
3e24087bfaeabe40b58ba2f7b936895b8f93fe27
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "0.1.2-alpha.1"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

dsh-v0.*
dsh-v0.1.0-rc.7
dsh-v0.1.0-rc.8
dsh-v0.1.1-rc.1
dsh-v0.1.1-rc.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82533.json"