An untrusted search path in DeepSeek Harness (dsh) commit c291e796 permits attackers to execute arbitrary code by supplying and opening crafted executable files in place of legitimate content. The flaw allows an attacker to run malicious code within the application’s context, providing full code execution capabilities (CWE‑426).

The vulnerability affects DeepSeek Harness (dsh) at the specific commit c291e796. No additional version or vendor information is available, but the flaw exists in the code base where the search path is not validated against trusted directories.

With a CVSS score of 10, this issue is classified as critical. EPSS data is not available, so the exact probability of exploitation remains unknown, and the vulnerability is not yet listed in the CISA KEV catalog. The likely attack vector requires the attacker to supply a crafted executable that the application will open, implying either local user interaction or remote exploitation if dsh is exposed through a network interface. Successful exploitation would provide the attacker with arbitrary code execution within the system.