Skip to content
AI IntelligenceAug 25, 2026AI Intelligence
Article

QiAnXin disclosed a critical unauthenticated remote-code-execution vulnerability (CVSS 9.8) in DeepSeek Harness, stemming from...

Flawed HTTP Host-header validation. Proof-of-concept code is already public, posing immediate risk to deployments.

Data Cube AI EditorialSource: Pandaily
01

Source Brief

QiAnXin disclosed a critical unauthenticated remote-code-execution vulnerability (CVSS 9.8) in DeepSeek Harness, stemming from flawed HTTP Host-header validation. Proof-of-concept code is already public, posing immediate risk to deployments.