Is CVE-2026-116368 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116368?

CVE-2026-116368 has a CVSS v3 severity of HIGH (7.3).

Back

CVE-2026-116368

Description

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.