Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-25 · high
The proof-of-concept works against any dsh web instance reachable beyond localhost, no login required.
Why now: The exploit code has been public since August 21.
ChaoMixian released dsh2shell on GitHub August 21, a Python proof-of-concept for unauthenticated remote code execution against DeepSeek Harness web instances. Anyone running a dsh web instance reachable beyond localhost can be taken over with no login required. The repository doesn't say how many instances are exposed that way, or whether ChaoMixian reported the bug before publishing exploit code for it.
Separately, the dshplugin/dsh-plugin-hub project lists a catalog of more than 4,000 community plugins, installable from inside the app's settings panel and updated daily. A compromised or malicious plugin installed through that panel would need no separate vulnerability to reach a user's instance. The hub doesn't describe a review process for what gets into that catalog before it's available to users.
Anyone with a dsh web instance exposed beyond localhost should close off network access or patch it. Reviewing the installed plugin list is a sensible next step on the same pass.
Each link below shares sources, entities, or timing with this story.
DeepSeek released DeepSeek Harness / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DeepSeek released DeepSeek Harness); both cover Anyone, August, DeepSeek Harness, GitHub; reported by the same outlet (github.com).
DeepSeek Harness uses Cordis / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DeepSeek Harness uses Cordis); both cover DeepSeek Harness, GitHub; reported by the same outlet (github.com).
DSH Desktop uses DeepSeek Harness / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DSH Desktop uses DeepSeek Harness); both cover August, GitHub; reported by the same outlet (github.com).
DeepSeek released DeepSeek Harness / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DeepSeek released DeepSeek Harness); both cover August, DeepSeek Harness; reported by the same outlet (github.com).
DeepSeek Harness uses Cordis / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (DeepSeek Harness uses Cordis); both cover August, GitHub; reported by the same outlet (github.com).
DeepSeek released DeepSeek Harness / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (DeepSeek released DeepSeek Harness); both cover August, DeepSeek Harness, GitHub; reported by the same outlet (github.com).
DeepSeek released DeepSeek Harness / Shared entity: DeepSeek Harness / Same source domain / Earlier coverage / Downstream implication
Linked by a graph relationship (DeepSeek released DeepSeek Harness); both cover DeepSeek Harness; reported by the same outlet (github.com).
Shared entities / Same source domain / Shared topic / Earlier coverage
Both cover Anyone, August, GitHub; reported by the same outlet (github.com); overlapping topics (anyone, august).