PT-2026-138021
CVE-2026-123653
·
Published
2026-11-06
·
Updated
2026-11-06
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
esengine DeepSeek-Reasonix versions prior to 2.53.0
Description
A remote attack is possible due to improper neutralization of input used for LLM prompting within the
discoverDocs() function located in the internal/memory/doc.go file.Recommendations
Upgrade to version 2.53.0.
As a temporary mitigation, restrict access to the
discoverDocs() function. Found an issue in the description? Have something to add? Feel free to write us 👾