CVE-2026-116368

CVSS 7.3 (high) · published 2026-10-26

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness: CWE-266, CWE-285

Source: NVD CVE-2026-116368

References

• https://vuldb.com/cve/CVE-2026-116368
• https://vuldb.com/submit/1012891
• https://vuldb.com/vuln/426332
• https://vuldb.com/vuln/426332/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.