CVE-2026-52394

Published: Oct 13, 2026Modified: Oct 16, 2026Deferred

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

Related CWEs

Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (3)

http://deepseek.com

Source: cve@mitre.org

https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c

Source: cve@mitre.org

https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.