{"id":"CVE-2026-95182","published":"2026-10-16T15:17:36.940","lastModified":"2026-10-16T19:56:15.773","description":"An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-426"],"vendors":[],"products":[],"references":[{"url":"http://deepseek.com","tags":[]},{"url":"https://gist.github.com/lkloliver/46a88c7d619e487327a1122c20ff8e32","tags":[]},{"url":"https://github.com/lkloliver/poc/tree/main/CVE-2026-95182","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/lkloliver/46a88c7d619e487327a1122c20ff8e32","tags":[]},{"url":"https://github.com/lkloliver/poc/tree/main/CVE-2026-95182","tags":[]}],"hasPoc":true,"ai":{"summary":"An untrusted search path vulnerability in DeepSeek Harness allows attackers to execute arbitrary code by replacing legitimate files with malicious executables, potentially leading to full system compromise.","exploitability":"Exploitation is relatively straightforward requiring only that an attacker can place a crafted executable in a location that dsh will execute, with no privileged access required and minimal user interaction needed.","blast_radius":"The impact could be severe across all systems running the affected version of DeepSeek Harness, potentially allowing attackers to gain complete control over those systems through arbitrary code execution.","remediation":"Upgrade to commit c291e796 or later which contains the fix for the untrusted search path vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","file-execution","untrusted-search-path"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:45:10.497Z"}}