CyberRota Analysis
AI-GeneratedA vulnerability exists in the deepseek-ai deepseek-harness component, specifically in the handling of the E2B_API_KEY argument, which could lead to reliance on untrusted inputs for security decisions. This issue requires local access to exploit and has a low severity rating, but the availability of public exploits means that it should not be overlooked. Organizations using affected versions should prioritize patching to mitigate potential risks associated with local attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to reliance on untrusted inputs in a security decision. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.