CVE-2026-82033

Name of the Vulnerable Software and Affected Versions DeepSeek Harness versions prior to 0.1.2-alpha.2

Description The web profile HTTP and WebSocket RPC control plane lacks authentication. This allows any local process, including those running under a different operating system user, to access unauthenticated session methods such as session.create and session.prompt. An attacker can use session.prompt to trigger the agent's bash and filesystem tools, leading to arbitrary command execution as the victim user using their configured model credentials. Additionally, attackers can intercept live session traffic and logs via the event mux stream and bypass human tool-approval checks through the '/api/respond' endpoint by matching the rpcId, approvalId, and sessionId values broadcast over the ungated stream.

Recommendations Update to version 0.1.2-alpha.2. Rotate the model keys.