CriticalCritical vulnerability
CVE-2026-95182 (CVSS 10.0)
NVD · officialPublished Oct 16, 2026Risk 50/100
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
Technical details
CVSS
10.0
AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:HighA:High
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source