Missing Authentication Vulnerability in DeepSeek Harness Affects Local Processes
CVE-2026-82033
What is CVE-2026-82033?
The DeepSeek Harness version prior to 0.1.2-alpha.2 contains a significant security flaw stemming from a missing authentication mechanism in its web profile HTTP and WebSocket RPC control plane. This vulnerability allows any local process, even those executing under a different OS user, to exploit unauthenticated session methods, including session.create and session.prompt. By leveraging session.prompt, attackers can trigger the agent's Bash and filesystem tools, leading to arbitrary command execution as the victim user with their configured model credentials. Moreover, they can intercept live session traffic and logs via the event mux stream, and bypass essential human tool-approval checks by simply matching the rpcId, approvalId, and sessionId broadcasted over the unsecured stream. Implementing the patch from release 0.1.2-alpha.2 is crucial to mitigating these risks.
Affected Version(s)
deepseek-harness 0 < 0.1.2-alpha.2
deepseek-harness 0 <= 3e24087bfaeabe40b58ba2f7b936895b8f93fe27