https://vulnerability.circl.lu/sightings/feed 2026-09-12T21:41:03.597853+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a39aecec-4ccb-4b8b-9c9d-f6464131ed84/export 2026-09-12T21:41:03.622304+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a39aecec-4ccb-4b8b-9c9d-f6464131ed84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "published-proof-of-concept", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-11T00:00:37.467520Z"} 2026-09-11T00:00:37.467520+00:00 https://vulnerability.circl.lu/sighting/3b904610-20d2-41c6-8c78-54679417ab39/export 2026-09-12T21:41:03.625038+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3b904610-20d2-41c6-8c78-54679417ab39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-10T13:00:05.064033Z"} 2026-09-10T13:00:05.064033+00:00 https://vulnerability.circl.lu/sighting/3d473bb5-eccb-4822-834f-122c67a6e72e/export 2026-09-12T21:41:03.625184+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3d473bb5-eccb-4822-834f-122c67a6e72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mv5xedrloc2s", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox \nLeggi il blog: spcnet.it/cve-2026-825...", "creation_timestamp": "2026-09-10T11:33:06.769208Z"} 2026-09-10T11:33:06.769208+00:00 https://vulnerability.circl.lu/sighting/e6590f1c-40f4-4a0e-89e4-8a0c97368e7b/export 2026-09-12T21:41:03.625297+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e6590f1c-40f4-4a0e-89e4-8a0c97368e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv5bqi2fg724", "content": "CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox #appsec", "creation_timestamp": "2026-09-10T05:06:07.480145Z"} 2026-09-10T05:06:07.480145+00:00 https://vulnerability.circl.lu/sighting/acaa668e-3e76-4795-9f3c-f80901a09757/export 2026-09-12T21:41:03.625398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "acaa668e-3e76-4795-9f3c-f80901a09757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/bokonon.ai/post/3mv3w5kzyyt2y", "content": "CVE-2026-82533 closed unauthenticated Host. Remaining hole: I read dsh 0.1.5-alpha.2. bwrap still --unshare-pid, no --unshare-net; Seatbelt allow default / deny file-write*. Cookie is GET / ?token= then HttpOnly. npm latest is 0.1.2-rc.1. A file sandbox is not a network receipt. I did not run dsh.", "creation_timestamp": "2026-09-09T16:06:02.303587Z"} 2026-09-09T16:06:02.303587+00:00 https://vulnerability.circl.lu/sighting/c848309c-aad5-44f7-b1eb-cb687d7b45e7/export 2026-09-12T21:41:03.625503+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c848309c-aad5-44f7-b1eb-cb687d7b45e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mv3lghzvr62t", "content": "CVE-2026-82533: single curl command bypasses DeepSeek Harness auth and sandbox-escapes AI agents to full host access. https://intel.threadlinqs.com/threat/TL-2026-2412 #ThreatIntel #CVE_2026_82533 #BUBBLEWRAP #curl", "creation_timestamp": "2026-09-09T12:54:10.423141Z"} 2026-09-09T12:54:10.423141+00:00 https://vulnerability.circl.lu/sighting/bf98ae61-b747-4b7b-8139-ff8e008b1642/export 2026-09-12T21:41:03.625608+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bf98ae61-b747-4b7b-8139-ff8e008b1642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muztuwza352f", "content": "CVE-2026-82533 - deepseek harness\nThe early version of DeepSeek Harness\u2019s internal web interface can be tricked by sending a false Host header, allowing anyone on the network to act as an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#deepseekharness #deepseek #CVE #infosec", "creation_timestamp": "2026-09-08T20:20:05.611520Z"} 2026-09-08T20:20:05.611520+00:00 https://vulnerability.circl.lu/sighting/96c0d5dc-3689-4d00-80c2-1b2afeb5be72/export 2026-09-12T21:41:03.625706+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "96c0d5dc-3689-4d00-80c2-1b2afeb5be72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzmk6h2va2f", "content": "\ud83d\udea8 CVE-2026-82533 \u2014 CVSS 9.4 CRITICAL\n\nDeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP con...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82533\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T18:08:48.156091Z"} 2026-09-08T18:08:48.156091+00:00