Product
DeepSeek Harness up to 0.2.0-rc.2 contains a vulnerability in the Browser Auth component (packages/client/connection/src/browser-auth.ts) that leads to improper authorization and can be initiated remotely.