esengine deepseek-reasonix vulnerabilities

Latest esengine deepseek-reasonix CVEs

Newest publication first

1. CVE-2026-123989 ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission

   Published 2026-11-07

   Medium·CVSS 5.3 EPSS 0.44%

   A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to ve...

2. CVE-2026-123653 esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting input

   Published 2026-11-06

   Medium·CVSS 5.3 EPSS 0.22%

   A security vulnerability has been detected in esengine DeepSeek-Reasonix up to 2.52.0. Affected is the function discoverDocs of the file internal/memory/doc.go. The manipulation leads to improper neutralization of input used for llm prompting. The attack can be initiated remotely...

3. CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

   Published 2026-09-29

   High·CVSS 7.8 EPSS 1.0%

   OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to execute arbitrary commands via the desktop app's workspace-c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.