AI IntelligenceAug 25, 2026AI Intelligence
Article
QiAnXin disclosed a critical unauthenticated remote-code-execution vulnerability (CVSS 9.8) in DeepSeek Harness, stemming from...
Flawed HTTP Host-header validation. Proof-of-concept code is already public, posing immediate risk to deployments.
Data Cube AI EditorialSource: Pandaily
01
Source Brief
QiAnXin disclosed a critical unauthenticated remote-code-execution vulnerability (CVSS 9.8) in DeepSeek Harness, stemming from flawed HTTP Host-header validation. Proof-of-concept code is already public, posing immediate risk to deployments.
02