TLDR Tech / InfoSec
CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox
CVE-2026-82533 affects DeepSeek Harness 0.1.1-rc.2 and earlier. Its local API trusted the client-controlled Host header instead of the peer address. Sandboxed sessions retained loopback access and could call that API to enable danger-full-access with approvals disabled. A single shell command escaped the sandbox on default settings. If port 3080 was forwarded or tunneled, unauthenticated remote attackers could control sessions and export stored conversations. DeepSeek fixed the issue in 0.1.2-alpha.1.
Read the full story