Vendor
DeepSeek Harness: Improper authorization in Browser Auth component (CVE-2026-116368)
1 CVEDeepSeek Harness up to 0.2.0-rc.2 contains a vulnerability in the Browser Auth component (packages/client/connection/src/browser-auth.ts) that leads to improper authorization and can be initiated remotely.
Emerging Trends in AI-Integrated Malware and Tracking via CAIRN
3 TTPs 4 IOCsCisco Talos has documented the emergence of malware leveraging LLM services and local inference, introducing the CAIRN framework to track these threats via metadata-based cognitive artifacts.
Authentication Bypass in DeepSeek Harness via Host Header Spoofing
2 TTPs 1 CVEDeepSeek Harness versions prior to 0.1.2-alpha.1 contain an authentication bypass vulnerability allowing unauthorized remote control of the agent via a spoofed HTTP Host header.
DeepSeek TUI SSRF Vulnerability via HTTP Redirect Bypass (CVE-2026-45310)
2 rules 1 TTP 3 IOCsDeepSeek TUI is vulnerable to a Server-Side Request Forgery (SSRF) attack (CVE-2026-45310) because the `fetch_url` tool validates the initial URL against a restricted-IP blocklist but fails to re-validate redirect targets, allowing attackers to exfiltrate sensitive information from cloud-hosted instances by using a redirect to a restricted IP address.