CVE-2026-95182
Published 16 Oct 2026 · updated 16 Oct 2026 · Deferred
10.0 Critical · CVSS 3.1, CISA ADP
Description
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.