Evidence · DiggingBeagle record
Advisory: DeepSeek Harness RPC unauthenticated cross-user shell and forged human approvals
The DeepSeek Harness local RPC service accepted session and tool-approval messages from a different operating-system user without binding decisions to the human authorizing the victim session. The published local-boundary demonstration for CVE-2026-82033 showed that a reachable HTTP/WebSocket service could lead to execution of victim-user file and shell tools by supplying observed approval identifiers. It is not a remote Internet compromise. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
The DeepSeek Harness local RPC service accepted session and tool-approval messages from a different operating-system user without binding decisions to the human authorizing the victim session. The published local-boundary demonstration for CVE-2026-82033 showed that a reachable HTTP/WebSocket service could lead to execution of victim-user file and shell tools by supplying observed approval identifiers. It is not a remote Internet compromise. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (2)
- supportsDeepSeek Harness local RPC accepted forged approval responses across user identities: The published local-boundary demonstration for CVE-2026-82033 showed that a reachable HTTP/WebSocket service could lead to execution of victim-user file and shell tools by supplying observed approval identifiers. It is not a remote Internet compromise.
GHSA-h3m7-c9pq-7995; Summary; affected versions and approval response
- supportsDeepSeek Harness local RPC accepted forged approval responses across user identities: The DeepSeek Harness local RPC service accepted session and tool-approval messages from a different operating-system user without binding decisions to the human authorizing the victim session.
GHSA-h3m7-c9pq-7995; Summary; affected versions and approval response