CVE-2026-95182 Details
Description
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
A vulnerability exists in DeepSeek Harness (dsh) commit c291e796, where an untrusted search path allows attackers to execute arbitrary code. This is achieved by supplying and opening crafted executable files in place of legitimate content. The issue arises because dsh spawns configured MCP servers using unqualified command names, inheriting the host process PATH. In default pnpm source-checkout deployments, the first PATH entries are writable by the model, enabling the injection of malicious executables that are executed in the context of the user's MCP configuration.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 16, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/lkloliver/poc/tree/main/CVE-2026-95182 | CISA-ADP | Exploit |
| http://deepseek.com | [email protected] | Vendor |
| https://gist.github.com/lkloliver/46a88c7d619e487327a1122c20ff8e32 | [email protected] | Technical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-426 | Untrusted Search Path | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| DeepSeek Harness | c291e796 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 16, 2026 | New CVE Received | [email protected] |