{"schema":"threatline.record/2","record":{"id":"CVE-2026-82533","aliases":["GHSA-8m2g-8cgm-3vcp"],"summary":"DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API","details":"DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane API that allows attackers to gain full agent control by supplying a spoofed Host header, as the server validates only the client-supplied Host header value rather than the actual TCP connection origin. Attackers can exploit this flaw to invoke privileged commands such as commands/execute with danger-full-access permissions, escalate session approval policies to unconfined execution, and retrieve all stored conversations without any credential or API key.","categories":["Libraries & packages"],"product":"@deepseek-ai/dsh-client-connection","vendor":"DeepSeek","ecosystem":"npm","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-8m2g-8cgm-3vcp","source_modified_at":"2026-10-07T20:41:37Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@deepseek-ai/dsh-client-connection"},"range":"< 0.1.2-alpha.1"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-82533","source_modified_at":"2026-09-10T14:57:09.857Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"DeepSeek Harness","vendor":"DeepSeek","versions":[{"status":"affected","version":"0","versionType":"custom","lessThan":"0.1.2-alpha.1"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-8m2g-8cgm-3vcp","source_modified_at":"2026-10-07T21:00:04.349245572Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"@deepseek-ai/dsh-client-connection","ecosystem":"npm","purl":"pkg:npm/%40deepseek-ai/dsh-client-connection"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.1.2-alpha.1"}]}],"versions":[]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-8m2g-8cgm-3vcp","source_modified_at":"2026-10-07T20:41:37Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"@deepseek-ai/dsh-client-connection"},"version":"0.1.2-alpha.1"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-82533","source_modified_at":"2026-09-10T14:57:09.857Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"DeepSeek Harness","ecosystem":null},"version":"0.1.2-alpha.1","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-8m2g-8cgm-3vcp","source_modified_at":"2026-10-07T21:00:04.349245572Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"@deepseek-ai/dsh-client-connection","ecosystem":"npm","purl":"pkg:npm/%40deepseek-ai/dsh-client-connection"},"version":"0.1.2-alpha.1"}],"cvss":9.4,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.01238,"percentile":0.68895,"score_date":"2026-10-23"},"published_at":"2026-09-08T16:59:47.860Z","modified_at":"2026-10-07T21:00:04.349245572Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-8m2g-8cgm-3vcp","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-07T20:41:37Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-82533","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-09-10T14:57:09.857Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-8m2g-8cgm-3vcp","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-07T21:00:04.349245572Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-82533","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82533","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/deepseek-ai/deepseek-harness/commit/3e24087bfaeabe40b58ba2f7b936895b8f93fe27","tags":["patch"]},{"source":"CVE List","url":"https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.2-alpha.1","tags":["release-notes"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/deepseek-harness-alpha-1-authentication-bypass-via-host-header-spoofing","tags":["third-party-advisory"]},{"url":"https://www.ox.security/blog/cve-2026-82533-deepseek-harness-ai-agent-sandbox-escape","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-8m2g-8cgm-3vcp","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.ox.security/blog/cve-2026-82533-deepseek-harness-ai-agent-sandbox-escape/","tags":["technical-description","exploit"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-09-08T17:20:59.863077Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-07T21:00:04.349245572Z","content_hash":"8cb04598a4a5ae594f546374b5d65f60f21444903c09d79b01b3d376fae84afd"}}