This vulnerability involves a path traversal issue in the loadProfile function within the packages/boot/app-boot/src/profile.ts file of the Bundle Patch Handler component in DeepSeek deepseek-harness. By manipulating the dsh.bundle.patch argument, an attacker can traverse directories beyond intended boundaries. The vulnerability affects versions 0.1.7-rc.0, 0.1.7-rc.1, and 0.1.7-rc.2. The attack can be performed remotely but requires a high level of complexity and user interaction. The vendor was contacted but did not provide a response or patch. Public exploit code is available, though no active exploitation has been observed.

Successful exploitation could allow an attacker to perform path traversal, potentially accessing unauthorized files or directories on the affected system. However, the low CVSS score and high complexity suggest limited impact and difficulty in exploitation. There is no indication of privilege escalation or remote code execution from the provided data.

No official fix or patch is currently available, and the vendor has not responded to the disclosure. Users should monitor vendor channels for updates. Given the exploit complexity and low severity, immediate urgent action may not be required, but caution is advised. Restricting access to the vulnerable component and validating input parameters may help mitigate risk until a patch is released.