Back
CVE-2026-101102
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
Medium5.3EPSS 0.22%
- Published
- Updated
- Reserved
- Assigned by
- VulDB
Description
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| VulDBCNA (assigner) | 4.0 | Medium5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
| VulDBCNA (assigner) | 3.1 | Medium6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C |
| VulDBCNA (assigner) | 3.0 | Medium6.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C |
| VulDBCNA (assigner) | 2.0 | Medium6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C |
| NVDNVD · Deferred | 4.0 | Medium5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (5 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
deepseek-ai · deepseek-harness
- affected 0.1.0-rc.0
- affected 0.1.0-rc.1
- affected 0.1.0-rc.2
- affected 0.1.0-rc.3
- affected 0.1.0-rc.4
- affected 0.1.0-rc.5
- affected 0.1.0-rc.6
- affected 0.1.0-rc.7
References (5)
- VDB-410977 | deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox (opens in a new tab)vdb-entrytechnical-description
- VDB-410977 | CTI Indicators (IOB, IOC, TTP, IOA) (opens in a new tab)signaturepermissions-required
- CVE-2026-101102 | CVE Analysis and Report (opens in a new tab)third-party-advisory
- Submit #935737 | deepseek-ai deepseek-harness dsh-v0.1.0-rc.7 DeepSeek Harness `run_code` (Code Mode) executes model-written T (opens in a new tab)third-party-advisory
- Submit #937812 | deepseek-ai DeepSeek Harness dsh-v0.1.0-rc.7 Command Injection (Duplicate) (opens in a new tab)third-party-advisory
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-101102)Record last updated .