CVE-2026-108789

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-108789", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-10-11T08:45:05.631Z", "datePublished": "2026-10-12T02:15:31.636Z", "dateUpdated": "2026-10-13T14:22:56.082Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-10-12T02:15:31.636Z"}, "title": "deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-841", "lang": "en", "description": "Enforcement of Behavioral Workflow"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-840", "lang": "en", "description": "Business Logic Errors"}]}], "affected": [{"vendor": "deepseek-ai", "product": "deepseek-harness", "versions": [{"version": "0.1.1-rc.0", "status": "affected"}, {"version": "0.1.1-rc.1", "status": "affected"}, {"version": "0.1.1-rc.2", "status": "affected"}], "cpes": ["cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"], "modules": ["dsh-workflow-worker-thread"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-10-11T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-10-11T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-10-11T10:50:20.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "ShiyuFan_BinYuan (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/416568", "name": "VDB-416568 | deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/416568/cti", "name": "VDB-416568 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-108789", "name": "CVE-2026-108789 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/959699", "name": "Submit #959699 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677", "tags": ["third-party-advisory"]}, {"url": "https://github.com/deepseek-ai/deepseek-harness/discussions/243", "tags": ["related"]}, {"url": "https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNftYxwk9CchJgGnHc", "tags": ["exploit"]}, {"url": "https://github.com/deepseek-ai/deepseek-harness/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202610"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-13T14:22:30.481471Z", "id": "CVE-2026-108789", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-13T14:22:56.082Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-108789", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-13T14:22:30.481471Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-13T14:22:44.784Z"}}], "cna": {"title": "deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow", "credits": [{"lang": "en", "type": "reporter", "value": "ShiyuFan_BinYuan (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"], "vendor": "deepseek-ai", "modules": ["dsh-workflow-worker-thread"], "product": "deepseek-harness", "versions": [{"status": "affected", "version": "0.1.1-rc.0"}, {"status": "affected", "version": "0.1.1-rc.1"}, {"status": "affected", "version": "0.1.1-rc.2"}]}], "timeline": [{"lang": "en", "time": "2026-10-11T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-10-11T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-10-11T10:50:20.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/416568", "name": "VDB-416568 | deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/416568/cti", "name": "VDB-416568 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-108789", "name": "CVE-2026-108789 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/959699", "name": "Submit #959699 | \u676d\u5dde\u6df1\u5ea6\u6c42\u7d22\u4eba\u5de5\u667a\u80fd\u57fa\u7840\u6280\u672f\u7814\u7a76\u6709\u9650\u516c\u53f8 DeepSeek Harness 0.1.1-rc.2 \u903b\u8f91\u7f3a\u9677", "tags": ["third-party-advisory"]}, {"url": "https://github.com/deepseek-ai/deepseek-harness/discussions/243", "tags": ["related"]}, {"url": "https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNftYxwk9CchJgGnHc", "tags": ["exploit"]}, {"url": "https://github.com/deepseek-ai/deepseek-harness/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202610"], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-841", "description": "Enforcement of Behavioral Workflow"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-840", "description": "Business Logic Errors"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-10-12T02:15:31.636Z"}}}, "cveMetadata": {"cveId": "CVE-2026-108789", "state": "PUBLISHED", "dateUpdated": "2026-10-13T14:22:56.082Z", "dateReserved": "2026-10-11T08:45:05.631Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-10-12T02:15:31.636Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*"], "modules": ["dsh-workflow-worker-thread"], "product": "deepseek-harness", "vendor": "deepseek-ai", "versions": [{"status": "affected", "version": "0.1.1-rc.0"}, {"status": "affected", "version": "0.1.1-rc.1"}, {"status": "affected", "version": "0.1.1-rc.2"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "id": "CVE-2026-108789", "lastModified": "2026-10-13T15:17:32.560", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-108789", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-13T14:22:30.481471Z", "version": "2.0.3"}}]}, "published": "2026-10-12T03:17:17.820", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/deepseek-ai/deepseek-harness/"}, {"source": "cna@vuldb.com", "url": "https://github.com/deepseek-ai/deepseek-harness/discussions/243"}, {"source": "cna@vuldb.com", "url": "https://mcniyfj5bw9b.feishu.cn/docx/M5H6d9AbioNftYxwk9CchJgGnHc"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-108789"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/959699"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/416568"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/416568/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-840"}, {"lang": "en", "value": "CWE-841"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.1.1-rc.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.1.1-rc.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.1.1-rc.2"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "deepseek-harness", "source": "cna", "vendor": "deepseek-ai"}, "product": "deepseek-harness", "vendor": "deepseek-ai"}], "created": "2026-10-12T04:30:05.842780+00:00", "updated": "2026-10-12T04:30:06.036638+00:00", "vendors": ["deepseek-ai", "deepseek-ai$PRODUCT$deepseek-harness"]}