CVE-2026-101102 (GCVE-0-2026-101102)

Vulnerability from cvelistv5 – Published: 2026-09-28 18:00 – Updated: 2026-09-28 18:00
VLAI
Title
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
Summary
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way.
Severity
5.3 (Medium)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
6.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
CWE
Assigner
References
URL Tags
https://vuldb.com/vuln/410977 vdb-entrytechnical-description
https://vuldb.com/vuln/410977/cti signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101102 third-party-advisory
https://vuldb.com/submit/935737 third-party-advisory
https://vuldb.com/submit/937812 third-party-advisory
Impacted products
Vendor Product Version CPE status
deepseek-ai deepseek-harness Affected: 0.1.0-rc.0
Affected: 0.1.0-rc.1
Affected: 0.1.0-rc.2
Affected: 0.1.0-rc.3
Affected: 0.1.0-rc.4
Affected: 0.1.0-rc.5
Affected: 0.1.0-rc.6
Affected: 0.1.0-rc.7
    cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
rockmelodeis (VulDB User) VulDB CNA Team
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Code Mode Sandbox"
          ],
          "product": "deepseek-harness",
          "vendor": "deepseek-ai",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.0-rc.0"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.1"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.2"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.3"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.4"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.5"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.6"
            },
            {
              "status": "affected",
              "version": "0.1.0-rc.7"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "rockmelodeis (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor\u0027s own code, SAFETY.md, and design notes all explicitly state the worker is \"containment, not a security boundary\". The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-265",
              "description": "Sandbox Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T18:00:07.284Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-410977 | deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/410977"
        },
        {
          "name": "VDB-410977 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/410977/cti"
        },
        {
          "name": "CVE-2026-101102 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-101102"
        },
        {
          "name": "Submit #935737 | deepseek-ai deepseek-harness dsh-v0.1.0-rc.7 DeepSeek Harness `run_code` (Code Mode) executes model-written T",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/935737"
        },
        {
          "name": "Submit #937812 | deepseek-ai DeepSeek Harness dsh-v0.1.0-rc.7 Command Injection (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/937812"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-28T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-28T05:04:23.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-101102",
    "datePublished": "2026-09-28T18:00:07.284Z",
    "dateReserved": "2026-09-28T02:59:05.372Z",
    "dateUpdated": "2026-09-28T18:00:07.284Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"
                ],
                "modules": [
                  "Code Mode Sandbox"
                ],
                "product": "deepseek-harness",
                "vendor": "deepseek-ai",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.0"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.1"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.2"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.3"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.4"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.5"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.6"
                  },
                  {
                    "status": "affected",
                    "version": "0.1.0-rc.7"
                  }
                ]
              }
            ],
            "source": "cna@vuldb.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor\u0027s own code, SAFETY.md, and design notes all explicitly state the worker is \"containment, not a security boundary\". The vendor was contacted early about this disclosure but did not respond in any way."
          }
        ],
        "id": "CVE-2026-101102",
        "lastModified": "2026-09-28T21:03:44.987",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "cna@vuldb.com",
              "type": "Secondary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.4,
              "source": "cna@vuldb.com",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cna@vuldb.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-09-28T18:17:17.397",
        "references": [
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/cve/CVE-2026-101102"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/submit/935737"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/submit/937812"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/vuln/410977"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/vuln/410977/cti"
          }
        ],
        "sourceIdentifier": "cna@vuldb.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-264"
              },
              {
                "lang": "en",
                "value": "CWE-265"
              }
            ],
            "source": "cna@vuldb.com",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.