CVE-2026-101102 | deepseek-ai deepseek-harness up to 0.1.0-rc.7 Code Mode Sandbox run_code sandbox

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. It has been declared as critical. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue.

This vulnerability is identified as CVE-2026-101102. The attack can be executed remotely. There is not any exploit available.

The vendor’s own code, SAFETY.md, and design notes all explicitly state the worker is “containment, not a security boundary”. The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More