Threats tagged 'ghsa-g5wx-c65h-w9px'

CVE-2026-95182 is a critical vulnerability in DeepSeek Harness (dsh) identified by an untrusted search path issue. This flaw allows attackers to execute arbitrary code by supplying and opening crafted executable files that replace legitimate content. The vulnerability has a CVSS score of 10, indicating maximum severity with network attack vector, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.