Prompt Injection Vulnerability in DeepSeek Harness by DeepSeek
CVE-2026-95183

8.8HIGH

Key Information:

Vendor

DeepSeek

Status
DeepSeek Harness
Vendor
CVE Published:
16 October 2026

What is CVE-2026-95183?

A security flaw exists in the context-compaction feature of DeepSeek Harness that allows attackers to perform prompt injection attacks through specially crafted external content. This vulnerability poses a risk as it enables unauthorized control over the input prompts processed by the system, potentially leading to the execution of malicious commands or the leakage of sensitive information.

References

http://deepseek.com
https://gist.github.com/lkloliver/c54c0cc91e1ec4f16b538e0...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.