
The Stack
DeepSeek's agent tool let the agent switch off its own sandbox
Two separate failures at the same lab in one week, and both are about the same thing: what a model provider promises a developer it will keep. DeepSeek's local coding-agent tool let a sandboxed agent turn off its own file sandbox with a single command and no approval prompt. The flaw, now CVE-2026-82533 with a CVSS score of 9.4, sits in DeepSeek Harness, the open-source tool the lab released in August to run coding agents on a developer's own machine; the repository passed 216,000 GitHub stars










