Description
A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-28
Score: 2.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: Path traversal that could be exploited remotely
Action: Assess Impact
AI Analysis

Impact

The vulnerability is a path traversal flaw in the loadProfile function of the Bundle Patch Handler. An attacker that supplies an crafted dsh.bundle.patch value can manipulate the file system path, potentially reading or overwriting sensitive files. The flaw allows remote exploitation, though it is described as difficult to exploit and requires high complexity. The vulnerability is classified as CWE-22.

Affected Systems

DeepSeek deepseek-harness up to version 0.1.7-rc.2. The vulnerable component is the Bundle Patch Handler within the deepseek-harness project. No patched release is publicly documented.

Risk and Exploitability

The CVSS score of 2.3 indicates low base severity. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the vulnerability can be triggered from remote contexts, with the public exploit already available, raising concern over potential exploitation. The attack requires a high level of complexity and is considered difficult to execute, but the availability of exploit code reduces the barrier to attack.

Generated by OpenCVE AI on September 28, 2026 at 20:37 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest DeepSeek deepseek-harness release that includes the path traversal fix, if a new version is available from the vendor.
  • If no patched version exists, restrict access to the Bundle Patch Handler by implementing firewall rules that allow only trusted IP addresses to invoke the loadProfile API.
  • Add server‑side path validation to reject any inputs containing '..' segments or absolute paths, mitigating traversal attempts.
  • Continuously monitor logs for abnormal loadProfile requests or attempts to access privileged file paths, and set up alerts for suspicious activity.

Generated by OpenCVE AI on September 28, 2026 at 20:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
First Time appeared Deepseek-ai
Deepseek-ai deepseek-harness
Vendors & Products Deepseek-ai
Deepseek-ai deepseek-harness

Mon, 28 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Title DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal
First Time appeared Deepseek
Deepseek deepseek-harness
Weaknesses CWE-22
CPEs cpe:2.3:a:deepseek:deepseek-harness:*:*:*:*:*:*:*:*
Vendors & Products Deepseek
Deepseek deepseek-harness
References
Metrics cvssV2_0

{'score': 2.6, 'vector': 'AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 3.1, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Deepseek Deepseek-harness
Deepseek-ai Deepseek-harness
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-01T14:50:17.727Z

Reserved: 2026-09-28T07:14:10.657Z

Link: CVE-2026-101132

cve-icon Vulnrichment

Updated: 2026-10-01T14:50:13.789Z

cve-icon NVD

Status : Deferred

Published: 2026-09-28T19:16:47.740

Modified: 2026-10-01T15:17:23.180

Link: CVE-2026-101132

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-29T13:00:06Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')