PT-2026-123403

CVE-2026-116367

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 3.1
6.3
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-265
CWE-264
Related identifiers
CVE-2026-116367
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com