Threats affecting pkg:npm/deepseek-ai/deepseek-harness

CVE-2026-108788 is a medium severity vulnerability in deepseek-ai deepseek-harness versions 0.1.1-rc.0, 0.1.1-rc.1, and 0.1.1-rc.2. It involves a sandbox issue in the spawn function of the Sandbox component, triggered by manipulation of the Profile argument. The vulnerability can be exploited locally. The vendor has not responded to disclosure, and no patch is currently available. The exploit has been publicly disclosed but is not known to be used in the wild.

A vulnerability in deepseek-ai deepseek-harness up to version 0.1.5-rc.3 allows local attackers to manipulate the E2B_API_KEY argument, causing reliance on untrusted inputs in a security decision. The issue affects an unknown function in the file packages/e2b/e2b/src/index.ts of the dsh component. Exploit code is publicly available. The vendor has not responded to disclosure attempts. The vulnerability has a low severity score of 3.3 CVSS and requires local access for exploitation.

CVE-2026-101102 is a medium severity vulnerability in deepseek-ai deepseek-harness versions 0.1.0-rc.0 through 0.1.0-rc.7. It affects the run_code function in the Code Mode Sandbox component, resulting in a sandbox issue that can be exploited remotely. The vendor explicitly states that the sandbox is for containment only and not a security boundary. There is no vendor response or patch available at this time.