CVE-2026-95183

CVSS 8.8 (high) · published 2026-10-16

An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.

Weakness: CWE-94

Source: NVD CVE-2026-95183

References

• http://deepseek.com
• https://gist.github.com/lkloliver/c54c0cc91e1ec4f16b538e0d8a1411b6

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.