VulnerabilitiesPrompt injection flaw reported in DeepSeek Harness compaction
A CVE published on 16 October 2026 says crafted external content can hijack the context-compaction feature of DeepSeek's command-line harness.
16 Oct 2026
CVE-2026-95183: Prompt Injection in DeepSeek Harness Context Compaction
A vulnerability in DeepSeek Harness's context-compaction feature allows attackers to execute prompt injection attacks via crafted external content.
Disclosed 16 October 2026 · Record updated 16 October 2026
Impact
Attackers can execute prompt injection attacks through context-compaction feature
Our coverage
VulnerabilitiesSources
- nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-95183