CVE-2026-116367 in Harness

Prediction

by VulDB Data Team • 10/26/2026

A vulnerability was found in <a href="/product/deepseek:harness">DeepSeek Harness up to 0.1.0-rc.5</a>. This vulnerability affects the function <code>createContext</code> of the file <em>packages/extensions/cordis-host-runner/src/sandbox.ts</em>. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-426331
• CPE: VulDB
• CWE: CWE-265 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-116367
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-116367
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-116367/