Evidence record / deepseek-harness
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptc
CVE-2026-108789 concerns a trusted workflow VM already replaced by sandboxed PTC. A new advisory concerns an old workflow worker that trusted generated scripts inside a VM with host-realm integration. The reported consequence is access to the worker’s files/processes/network as the harness user, requiring workflow execution. The current rc already uses sandboxed PTC instead. No vendor CVE-specific fixed-version designation was found.
Channel: docs-only publication; architectural replacement already on current rc. Half: both. Date: 2026-10-12T02:15:31Z (CVE); GHSA at 03:32:56Z.
Operator consequence: Inventory and replace old workflow-worker deployments. Do not translate the database’s remote-attack label into unauthenticated network access, or treat the earlier replacement as a newly shipped October 12 fix. A vendor mapping or controlled reproducer would settle CVE-specific fix status.
Receipt
- https://github.com/CVEProject/cvelistV5/blob/30f71dd3a295cf4496adceec548e18604139026b/cves/2026/108xxx/CVE-2026-108789.json
- https://github.com/advisories/GHSA-wc99-rg5g-w3c8
- https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/packages/workflow/workflow-worker-thread/src/realm.ts#L1-L7
- https://github.com/deepseek-ai/deepseek-harness/commit/35af8698c24c1b7654cd5c83dcbec224e50f2337
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptc
Profile citations
- deepseek-harness / claim / cve-workflow-publication
Source links
Primary links, including exact changelog lines when available.
- commit pinned cve record2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptcCVEProject/cvelistV5 / cves/2026/108xxx/CVE-2026-108789.jsoncanonical advisory2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptcgithub.com/advisories/GHSA-wc99-rg5g-w3c8tagged commit file2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptcdeepseek-ai/deepseek-harness / packages/workflow/workflow-worker-thread/src/realm.ts#L1-L7commit2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptcgithub.com/deepseek-ai/deepseek-harness/commit/35af8698c24c1b7654cd5c83dcbec224e50f2337
Versioned source: run artifact