Flaw in DeepSeek Harness AI Coding Tool Let Agents Disable Their Sandbox
DevOps.com, Wednesday, September 9th, 2026
CVE-2026-82533 let unauthenticated attackers bypass sandbox restrictions through host header spoofing.
CVE-2026-82533 in DeepSeek Harness allowed unauthenticated attackers to bypass sandbox restrictions via host header spoofing, gaining full agent control and access to credentials.
The failure is instructive about agent security architecture generally: the sandbox was enforced by a component that trusted a client-supplied header, which is the same class of mistake that has produced SSRF bugs for years.
As coding agents gain filesystem and network access, the sandbox becomes the only meaningful control boundary, and it must be enforced outside anything the agent or a remote caller can influence.