DeepSeek Harness Believed the Host Header. shell.online Now Documents Self-Hosting, and TRUST_PROXY Ships Off.
This story is from 2026-09-10. It is preserved in the archive; the latest stories are on the live feed.
VulnCheck published CVE-2026-82533 on September 8. It is against DeepSeek Harness, the open-source tool that runs a coding agent's commands inside an operating-system sandbox on the developer's machine, and it scores 9.4. The OX Security write-up by Nir Zadok and Moshe Siman Tov Bustan describes th…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-10 20:34 · DEV Community — AI
DeepSeek Harness Believed the Host Header. shell.online Now Documents Self-Hosting, and TRUST_PROXY Ships Off.