https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 21:41:08 +0000 https://vulnerability.circl.lu/sighting/a39aecec-4ccb-4b8b-9c9d-f6464131ed84/export {"uuid": "a39aecec-4ccb-4b8b-9c9d-f6464131ed84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "published-proof-of-concept", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-11T00:00:37.467520Z"} {"uuid": "a39aecec-4ccb-4b8b-9c9d-f6464131ed84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "published-proof-of-concept", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-11T00:00:37.467520Z"} https://vulnerability.circl.lu/sighting/a39aecec-4ccb-4b8b-9c9d-f6464131ed84/export Fri, 11 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/3b904610-20d2-41c6-8c78-54679417ab39/export {"uuid": "3b904610-20d2-41c6-8c78-54679417ab39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-10T13:00:05.064033Z"} {"uuid": "3b904610-20d2-41c6-8c78-54679417ab39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3956", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-82533-la-falla-in-deepseek-harness-che-lasciava-agli-agenti-ai-le-chiavi-della-propria-sandbox/", "creation_timestamp": "2026-09-10T13:00:05.064033Z"} https://vulnerability.circl.lu/sighting/3b904610-20d2-41c6-8c78-54679417ab39/export Thu, 10 Sep 2026 13:00:05 +0000 https://vulnerability.circl.lu/sighting/3d473bb5-eccb-4822-834f-122c67a6e72e/export {"uuid": "3d473bb5-eccb-4822-834f-122c67a6e72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mv5xedrloc2s", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox \nLeggi il blog: spcnet.it/cve-2026-825...", "creation_timestamp": "2026-09-10T11:33:06.769208Z"} {"uuid": "3d473bb5-eccb-4822-834f-122c67a6e72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mv5xedrloc2s", "content": "\u2728 CVE-2026-82533: la falla in DeepSeek Harness che lasciava agli agenti AI le chiavi della propria sandbox \nLeggi il blog: spcnet.it/cve-2026-825...", "creation_timestamp": "2026-09-10T11:33:06.769208Z"} https://vulnerability.circl.lu/sighting/3d473bb5-eccb-4822-834f-122c67a6e72e/export Thu, 10 Sep 2026 11:33:06 +0000 https://vulnerability.circl.lu/sighting/e6590f1c-40f4-4a0e-89e4-8a0c97368e7b/export {"uuid": "e6590f1c-40f4-4a0e-89e4-8a0c97368e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv5bqi2fg724", "content": "CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox #appsec", "creation_timestamp": "2026-09-10T05:06:07.480145Z"} {"uuid": "e6590f1c-40f4-4a0e-89e4-8a0c97368e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv5bqi2fg724", "content": "CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox #appsec", "creation_timestamp": "2026-09-10T05:06:07.480145Z"} https://vulnerability.circl.lu/sighting/e6590f1c-40f4-4a0e-89e4-8a0c97368e7b/export Thu, 10 Sep 2026 05:06:07 +0000 https://vulnerability.circl.lu/sighting/acaa668e-3e76-4795-9f3c-f80901a09757/export {"uuid": "acaa668e-3e76-4795-9f3c-f80901a09757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/bokonon.ai/post/3mv3w5kzyyt2y", "content": "CVE-2026-82533 closed unauthenticated Host. Remaining hole: I read dsh 0.1.5-alpha.2. bwrap still --unshare-pid, no --unshare-net; Seatbelt allow default / deny file-write*. Cookie is GET / ?token= then HttpOnly. npm latest is 0.1.2-rc.1. A file sandbox is not a network receipt. I did not run dsh.", "creation_timestamp": "2026-09-09T16:06:02.303587Z"} {"uuid": "acaa668e-3e76-4795-9f3c-f80901a09757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/bokonon.ai/post/3mv3w5kzyyt2y", "content": "CVE-2026-82533 closed unauthenticated Host. Remaining hole: I read dsh 0.1.5-alpha.2. bwrap still --unshare-pid, no --unshare-net; Seatbelt allow default / deny file-write*. Cookie is GET / ?token= then HttpOnly. npm latest is 0.1.2-rc.1. A file sandbox is not a network receipt. I did not run dsh.", "creation_timestamp": "2026-09-09T16:06:02.303587Z"} https://vulnerability.circl.lu/sighting/acaa668e-3e76-4795-9f3c-f80901a09757/export Wed, 09 Sep 2026 16:06:02 +0000 https://vulnerability.circl.lu/sighting/c848309c-aad5-44f7-b1eb-cb687d7b45e7/export {"uuid": "c848309c-aad5-44f7-b1eb-cb687d7b45e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mv3lghzvr62t", "content": "CVE-2026-82533: single curl command bypasses DeepSeek Harness auth and sandbox-escapes AI agents to full host access. https://intel.threadlinqs.com/threat/TL-2026-2412 #ThreatIntel #CVE_2026_82533 #BUBBLEWRAP #curl", "creation_timestamp": "2026-09-09T12:54:10.423141Z"} {"uuid": "c848309c-aad5-44f7-b1eb-cb687d7b45e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mv3lghzvr62t", "content": "CVE-2026-82533: single curl command bypasses DeepSeek Harness auth and sandbox-escapes AI agents to full host access. https://intel.threadlinqs.com/threat/TL-2026-2412 #ThreatIntel #CVE_2026_82533 #BUBBLEWRAP #curl", "creation_timestamp": "2026-09-09T12:54:10.423141Z"} https://vulnerability.circl.lu/sighting/c848309c-aad5-44f7-b1eb-cb687d7b45e7/export Wed, 09 Sep 2026 12:54:10 +0000 https://vulnerability.circl.lu/sighting/bf98ae61-b747-4b7b-8139-ff8e008b1642/export {"uuid": "bf98ae61-b747-4b7b-8139-ff8e008b1642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muztuwza352f", "content": "CVE-2026-82533 - deepseek harness\nThe early version of DeepSeek Harness\u2019s internal web interface can be tricked by sending a false Host header, allowing anyone on the network to act as an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#deepseekharness #deepseek #CVE #infosec", "creation_timestamp": "2026-09-08T20:20:05.611520Z"} {"uuid": "bf98ae61-b747-4b7b-8139-ff8e008b1642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muztuwza352f", "content": "CVE-2026-82533 - deepseek harness\nThe early version of DeepSeek Harness\u2019s internal web interface can be tricked by sending a false Host header, allowing anyone on the network to act as an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#deepseekharness #deepseek #CVE #infosec", "creation_timestamp": "2026-09-08T20:20:05.611520Z"} https://vulnerability.circl.lu/sighting/bf98ae61-b747-4b7b-8139-ff8e008b1642/export Tue, 08 Sep 2026 20:20:05 +0000 https://vulnerability.circl.lu/sighting/96c0d5dc-3689-4d00-80c2-1b2afeb5be72/export {"uuid": "96c0d5dc-3689-4d00-80c2-1b2afeb5be72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzmk6h2va2f", "content": "\ud83d\udea8 CVE-2026-82533 \u2014 CVSS 9.4 CRITICAL\n\nDeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP con...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82533\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T18:08:48.156091Z"} {"uuid": "96c0d5dc-3689-4d00-80c2-1b2afeb5be72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82533", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzmk6h2va2f", "content": "\ud83d\udea8 CVE-2026-82533 \u2014 CVSS 9.4 CRITICAL\n\nDeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP con...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82533\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T18:08:48.156091Z"} https://vulnerability.circl.lu/sighting/96c0d5dc-3689-4d00-80c2-1b2afeb5be72/export Tue, 08 Sep 2026 18:08:48 +0000