CVE-2026-95182 in DeepSeek
Summary
by MITRE • 10/16/2026
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 10/16/2026
The vulnerability identified as an untrusted search path issue within the DeepSeek Harness, specifically associated with commit c291e796, represents a critical security flaw rooted in improper handling of file system paths during execution processes. This type of vulnerability occurs when software constructs or relies upon external input to determine which files or resources to access without adequately validating that these inputs point to trusted and intended locations. In the context of DeepSeek Harness, this flaw allows attackers to exploit the application's behavior by supplying crafted executable files in place of legitimate content. The core technical mechanism involves the system searching for required executables or libraries in directories where an attacker has write permissions or control, thereby enabling them to substitute malicious code for expected binaries. When the harness attempts to load these components, it inadvertently executes the attacker-controlled payload rather than the intended safe software, leading directly to arbitrary code execution on the affected host system.
From a technical perspective, this flaw aligns with CWE-427, which defines Uncontrolled Search Path Element as a situation where an application searches for files in directories that are not secure or trusted. The operational impact of such a vulnerability is severe, as it bypasses standard authentication and authorization mechanisms by leveraging the trust relationship between the running process and its environment variables or configuration paths. An attacker who can influence the search path or place malicious executables in accessible locations can achieve full system compromise, including data exfiltration, installation of backdoors, lateral movement within a network, or denial of service through resource exhaustion. The severity is further amplified if the DeepSeek Harness runs with elevated privileges, as this would grant the executed arbitrary code equivalent administrative rights on the target machine.
This vulnerability also maps to MITRE ATT&CK technique T1546.008, specifically Event Triggered Execution: Untrusted Search Path, which describes how attackers can manipulate system behavior by exploiting poorly secured search paths during process execution. The attack vector typically requires local access or network-level access if the harness is exposed remotely and processes untrusted inputs that influence path resolution. Defenders must recognize that this is not merely a configuration error but a fundamental design flaw in how external resources are resolved, making it particularly dangerous in environments where multiple users or services share system directories.
To mitigate this vulnerability, developers should implement strict validation of all file paths before attempting to open or execute them. This includes ensuring that only absolute paths from trusted, read-only directories are used and rejecting any relative paths or inputs derived from untrusted sources. Implementing path canonicalization checks can help prevent directory traversal attacks often associated with search path vulnerabilities. Additionally, applying the principle of least privilege ensures that even if an attacker succeeds in substituting a malicious executable, the resulting code runs with minimal permissions, limiting potential damage. Regular security audits and static analysis tools configured to detect CWE-427 patterns should be integrated into the development lifecycle to identify such issues before deployment. For existing deployments, restricting write access to directories containing critical executables and monitoring for unexpected file modifications can provide an additional layer of defense against exploitation attempts.