ThreatRoundup

CVE-2026-116368: DeepSeek Harness (Medium, CVSS 6.9)

Remote Attacker

CVE record · updated

CVE-2026-116368MediumDeepSeek Harness
CVSS
6.9 Medium (v4.0)
Exploited in the wild
Not on CISA’s KEV list
Public exploit
None reported in public exploit databases
Weakness
CWE-266, CWE-285
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Published
Oct 26, 2026

What it is

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Description from the National Vulnerability Database.

What to do

Check whether you run DeepSeek Harness, then apply the vendor’s fix or mitigation from the advisories below.

Sources: NVD, FIRST EPSS, CISA KEV, and public exploit databases (availability only). ThreatRoundup reports whether public exploit code exists but never links to it: fake proof-of-concepts that infect security researchers are common. This page updates automatically.