2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptc

CVE-2026-108789 concerns a trusted workflow VM already replaced by sandboxed PTC. A new advisory concerns an old workflow worker that trusted generated scripts inside a VM with host-realm integration. The reported consequence is access to the worker’s files/processes/network as the harness user, requiring workflow execution. The current rc already uses sandboxed PTC instead. No vendor CVE-specific fixed-version designation was found.

Channel: docs-only publication; architectural replacement already on current rc. Half: both. Date: 2026-10-12T02:15:31Z (CVE); GHSA at 03:32:56Z.

Operator consequence: Inventory and replace old workflow-worker deployments. Do not translate the database’s remote-attack label into unauthenticated network access, or treat the earlier replacement as a newly shipped October 12 fix. A vendor mapping or controlled reproducer would settle CVE-specific fix status.

Receipt

• https://github.com/CVEProject/cvelistV5/blob/30f71dd3a295cf4496adceec548e18604139026b/cves/2026/108xxx/CVE-2026-108789.json
• https://github.com/advisories/GHSA-wc99-rg5g-w3c8
• https://github.com/deepseek-ai/deepseek-harness/blob/dsh-v0.1.1-rc.2/packages/workflow/workflow-worker-thread/src/realm.ts#L1-L7
• https://github.com/deepseek-ai/deepseek-harness/commit/35af8698c24c1b7654cd5c83dcbec224e50f2337