CVE-2026-123989
ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to version 1.34.0 is recommended to address this issue. The patch is named a54659c2c5b0f4e57aae2b44d41f421c6a71e8cf. You should upgrade the affected component.
| CWE | CWE-275 CWE-266 |
| Vendor | esengine |
| Product | deepseek-reasonix |
| Published | Nov 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for esengine deepseek-reasonix
Be the first to know when new medium vulnerabilities affecting esengine deepseek-reasonix are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
ESEngine / DeepSeek-Reasonix
1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 1.23 1.24 1.25 1.26 1.27 1.28 1.29 1.30 1.31 1.32 1.33.0
References
vuldb.com: https://vuldb.com/vuln/432064 vuldb.com: https://vuldb.com/vuln/432064/cti vuldb.com: https://vuldb.com/cve/CVE-2026-123989 vuldb.com: https://vuldb.com/submit/1035343 github.com: https://github.com/esengine/DeepSeek-Reasonix/security/advisories/GHSA-6qf8-c4r6-q4qq github.com: https://github.com/esengine/DeepSeek-Reasonix/pull/9599 github.com: https://github.com/esengine/DeepSeek-Reasonix/commit/a54659c2c5b0f4e57aae2b44d41f421c6a71e8cf github.com: https://github.com/esengine/DeepSeek-Reasonix/releases/tag/desktop-v1.34.0 github.com: https://github.com/esengine/DeepSeek-Reasonix/
Credits
🔍 Ruoyyy (VulDB User)