CVE-2026-82033
Received Received - Intake

DeepSeek Harness Missing Authentication Vulnerability

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: VulnCheck

Description
DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different OS user, to reach unauthenticated session methods such as session.create and session.prompt. Attackers can invoke session.prompt to trigger the agent's bash and filesystem tools, achieve arbitrary command execution as the victim user using their configured model credentials, intercept live session traffic and logs over the event mux stream, and bypass human tool-approval checks via POST /api/respond by matching only rpcId, approvalId, and sessionId values broadcast over the ungated stream.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-82033
EUVD
EUVD-2026-117046

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
deepseek-ai deepseek-harness 0
deepseek-ai deepseek-harness 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82033 is a missing authentication vulnerability in DeepSeek Harness versions prior to 0.1.2-alpha.2. It allows unauthenticated local processes, even those running as different OS users, to execute RPC commands via the web profile's HTTP and WebSocket control plane. Attackers can trigger session.prompt to run bash and filesystem tools, enabling arbitrary command execution under the victim user's credentials.

Detection Guidance

Check if DeepSeek Harness is running on default port 3080 with unauthenticated API access. Inspect network traffic for unauthenticated POST requests to /api/respond or WebSocket connections to the control plane. Look for suspicious session.prompt invocations triggering bash or filesystem tools.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on your system as the victim user, intercept live session traffic and logs, and bypass human tool-approval checks. Since it affects local processes, even users with different OS permissions could exploit it to gain control over your system.

Mitigation Strategies

Upgrade DeepSeek Harness to version 0.1.2-alpha.2 or later. Ensure the web GUI host only binds to loopback addresses (127.0.0.1) and enforce application/json content-type for all /api POST requests. Block external access to port 3080 and validate Host headers to prevent DNS rebinding attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82033. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...