anonhaven

CVE-2026-52394

CRITICAL CVSS 3.1: 9.1 EPSS 0.40%
Updated Oct 16, 2026
DeepSeek
Parameter Value
CVSS 9.1 (CRITICAL)
Type CWE-209 (Information Exposure Through Error Message), CWE-201
Vendor DeepSeek
Public PoC No

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-209 Information Exposure Through Error Message
CWE-201

References 2

http://deepseek.com
cve@mitre.org
https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c
cve@mitre.org
Share Post Share Share Share