Incorrect Access Control in DeepSeek V4 by DeepSeek
CVE-2026-52394

9.1CRITICAL

Key Information:

Vendor

DeepSeek

Status
DeepSeek V4
Vendor
CVE Published:
13 October 2026

What is CVE-2026-52394?

DeepSeek V4 is susceptible to incorrect access control due to crafted input, potentially allowing unauthorized users to gain access to restricted functionalities. Proper validation and authentication mechanisms should be implemented to mitigate the risk of exploitation. For more information, visit the DeepSeek website or check out additional resources.

References

http://deepseek.com
https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c60...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.