CVE-2026-116368 | DeepSeek Harness up to 0.2.0-rc.2 Browser Auth browser-auth.ts improper authorization

October 26, 2026 Yanac

A vulnerability has been found in DeepSeek Harness up to 0.2.0-rc.2 and classified as critical. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-116368. The attack can be initiated remotely. There is not any exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More