CVE-2026-116368High· 7.3▾ TwilightA vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper a…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Harness 0.2.0-rc.0Harness 0.2.0-rc.1Harness 0.2.0-rc.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116367Medium· 6.3DeepSeek Harness sandbox.ts createContext
CVE-2026-92750Medium· 6.5Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to
CVE-2026-116384Medium· 6.3Bdtask Garage 24 Garage Management Software Backend improper authorization
CVE-2026-116274Medium· 4.3JIZHICMS Front-end Order OrderController.php pay improper authorization
CVE-2026-114361Medium· 5.6HarnessRouter Identity Mode app.py improper authorization
CVE-2026-114249High· 7.3dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization