CVE-2026-108788

5.3Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

5.3Medium

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-264, CWE-265

Impact

A local attacker can bypass sandbox restrictions to access, modify, or disrupt local system resources. They need local shell or execution access on the host running the harness.

Root cause

Improper privilege and permission handling occurs during manipulation of the Profile argument inside the Sandbox component's spawn function.

Affected systems

deepseek-ai deepseek-harness up to 0.1.1-rc.2

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

No vendor fix is currently available; restrict local execution access or halt running deepseek-harness workloads until an upstream patch is released.

shell

$ pip show deepseek-harness

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108788