{"data":{"id":"6349c628-964f-4419-83c9-562e8fdcd3ef","title":"GHSA-wx44-2q6h-j6p8: DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval","summary":"The run_tests tool in DeepSeek TUI executes cargo test with ApprovalRequirement::Auto, so it runs without a user approval prompt. Because cargo test compiles and executes test binaries, build.rs scripts and proc macros, a malicious repository can run arbitrary shell commands with no approval, and the source states AGENTS.md can instruct the model to call run_tests at session start.","solution":"Change run_tests to require approval, matching exec_shell: fn approval_requirement(&self) -> ApprovalRequirement { ApprovalRequirement::Required }","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wx44-2q6h-j6p8","publishedAt":"2026-05-14T20:29:33.000Z","cveId":"CVE-2026-45311","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","supply_chain"],"issueType":"vulnerability","affectedPackages":["deepseek-tui@>= 0.3.0, < 0.8.23 (fixed: 0.8.23)","deepseek-tui-cli@>= 0.3.0, < 0.8.23 (fixed: 0.8.23)","deepseek-tui@>= 0.3.0, < 0.8.23 (fixed: 0.8.23)"],"affectedPackageNames":["deepseek-tui","deepseek-tui-cli"],"affectedPackageRefs":["cargo:deepseek-tui","cargo:deepseek-tui-cli","npm:deepseek-tui"],"affectedVendors":[],"affectedVendorsRaw":["DeepSeek TUI","DeepSeek"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00566,"epssCheckedAt":"2026-11-07T00:12:15.020Z","kevDateAdded":null,"advisoryAliases":["GHSA-wx44-2q6h-j6p8"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:29:33.000Z","fixReleasedAt":"2026-05-09T03:44:02.586Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:36:03.332Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"],"fixes":[{"ecosystem":"cargo","name":"deepseek-tui-cli","fixedVersion":"0.8.23","matchedVersion":"0.8.23","fixReleasedAt":"2026-05-09T03:44:02.586Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.186Z"},{"ecosystem":"npm","name":"deepseek-tui","fixedVersion":"0.8.23","matchedVersion":"0.8.23","fixReleasedAt":"2026-05-09T03:45:36.220Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.186Z"},{"ecosystem":"cargo","name":"deepseek-tui","fixedVersion":"0.8.23","matchedVersion":"0.8.23","fixReleasedAt":"2026-05-09T03:44:49.552Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.186Z"}]}}