DeepSeek's Agent Could Turn Off Its Own Sandbox

DeepSeek Harness (dsh) agents could switch their own sandbox to danger-full-access with one shell command: no approval prompt, and the log said the user did it. Here's how CVE-2026-82533 worked, what the fix changed, and what it still doesn't cover. If you run dsh: update to 0.1.2-alpha.2 or later. Pro tips in this video: why localhost is not a trust boundary, how to box an agent with no network by default, and what to check before you install any agent tool. 0:00 The bug 0:36 What dsh is 1:23 How the escape worked 3:31 Timeline 4:17 The fix 4:43 What to do 5:22 Verdict Sources The Hacker News, Sep 9 2026: https://thehackernews.com/2026/09/dee... GitHub advisory GHSA-8m2g-8cgm-3vcp: https://github.com/advisories/GHSA-8m... VulnCheck advisory: https://www.vulncheck.com/advisories/... NVD, CVE-2026-82533: https://nvd.nist.gov/vuln/detail/CVE-... dsh sandbox docs: https://github.com/deepseek-ai/deepse... dsh SAFETY.md: https://github.com/deepseek-ai/deepse... Discussion #250 (Aug 13): https://github.com/deepseek-ai/deepse... Fix commit: https://github.com/deepseek-ai/deepse... Forkast: https://forkast.news/deepseek-harness... #AIagents #DeepSeek #AIsecurity