importantSYS.SOURCE: The Hacker News• 2026-09-09T16:47:07+05:30

Critical Vulnerability in DeepSeek Harness Allows AI Agents to Bypass File Sandbox Restrictions

#ai #vulnerability #security #software #sandbox

A critical vulnerability (CVE-2026-82533) in DeepSeek Harness allows AI agents to disable their own file sandbox without approval by exploiting the tool's local web interface. The flaw was patched in version 0.1.2-alpha.2, but users are advised to upgrade to mitigate risks, as the sandboxing mechanisms do not guarantee isolation.

A flaw in DeepSeek Harness, DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed agent turn off its own sandbox with a single command.

The tool runs an agent's commands inside an operating-system sandbox, so that an agent working on untrusted files cannot write outside its workspace. The agent could remove that limit by calling the tool's own web

Read original article

*** END OF TRANSMISSION ***

> ANTHROPIC RESEARCHER RESIGNS OVER CONCERNS ABOUT SELF-IMPROVING AI RISKS > SHIPT INTRODUCES AI-POWERED SHOPPING ASSISTANT TO ENHANCE USER EXPERIENCE > UBER INVESTS $10 MILLION IN INDIAN FLEET OPERATOR CARRUM AT $168 MILLION VALUATION > REPLAYABLE AI TOKENS FROM INFOSTEALER LOGS BYPASS MFA PROTECTIONS > DECLINE IN AI SPENDING PER EMPLOYEE AT TOP FIRMS IN AUGUST: SEASONAL LULL OR STRATEGIC CONCERN?> ANCIENT GREEK WATER CLOCK: PIONEERING TIMEKEEPING DEVICE WITH EXCEPTIONAL LONGEVITY > THE INEFFECTIVENESS OF REACTIVE SECURITY STRATEGIES IN MODERN CYBERSECURITY > ECONOMIC IMPACTS OF AI DEVELOPMENT: SCENARIOS AND PROJECTIONS > TAILWIND LABS INTEGRATES WITH SHOPIFY FOR LONG-TERM FRAMEWORK DEVELOPMENT > BIPARTISAN LAWMAKERS URGE U.S. TO SANCTION HACK-FOR-HIRE FIRMS OVER CYBERATTACKS AND CENSORSHIP> ANTHROPIC RESEARCHER RESIGNS OVER CONCERNS ABOUT SELF-IMPROVING AI RISKS > SHIPT INTRODUCES AI-POWERED SHOPPING ASSISTANT TO ENHANCE USER EXPERIENCE > UBER INVESTS $10 MILLION IN INDIAN FLEET OPERATOR CARRUM AT $168 MILLION VALUATION > REPLAYABLE AI TOKENS FROM INFOSTEALER LOGS BYPASS MFA PROTECTIONS > DECLINE IN AI SPENDING PER EMPLOYEE AT TOP FIRMS IN AUGUST: SEASONAL LULL OR STRATEGIC CONCERN?> ANCIENT GREEK WATER CLOCK: PIONEERING TIMEKEEPING DEVICE WITH EXCEPTIONAL LONGEVITY > THE INEFFECTIVENESS OF REACTIVE SECURITY STRATEGIES IN MODERN CYBERSECURITY > ECONOMIC IMPACTS OF AI DEVELOPMENT: SCENARIOS AND PROJECTIONS > TAILWIND LABS INTEGRATES WITH SHOPIFY FOR LONG-TERM FRAMEWORK DEVELOPMENT > BIPARTISAN LAWMAKERS URGE U.S. TO SANCTION HACK-FOR-HIRE FIRMS OVER CYBERATTACKS AND CENSORSHIP