CVE-2026-123653

    Dashboard / Vulnerabilities / CVE-2026-123653

    CVE-2026-123653

    Published: 6 Nov 2026Last Modified: 8 Nov 2026

    Summary: esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting input

    Details: A security vulnerability has been detected in esengine DeepSeek-Reasonix up to 2.52.0. Affected is the function discoverDocs of the file internal/memory/doc.go. The manipulation leads to improper neutralization of input used for llm prompting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.53.0 is able to address this issue. The identifier of the patch is 4ca33493a673c2788aa8598fbca2b2f47a69e1b8. It is suggested to upgrade the affected component.

    References: https://github.com/esengine/DeepSeek-Reasonix/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/123xxx/CVE-2026-123653.json, https://github.com/esengine/DeepSeek-Reasonix/security/advisories/GHSA-7v48-x992-r5w7, https://nvd.nist.gov/vuln/detail/CVE-2026-123653, https://vuldb.com/cve/CVE-2026-123653, https://vuldb.com/submit/1033134, https://vuldb.com/vuln/431772, https://github.com/esengine/DeepSeek-Reasonix/issues/13061, https://vuldb.com/vuln/431772/cti, https://github.com/esengine/DeepSeek-Reasonix/commit/4ca33493a673c2788aa8598fbca2b2f47a69e1b8, https://github.com/esengine/DeepSeek-Reasonix/releases/tag/v2.53.0, https://github.com/ybyu-ieu/agent-security-advisories/blob/main/deepseek-reasonix/deepseek-reasonix-agents-md-prompt-injection-command-execution.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- f37634cddea41d2dedffac6bce7ee6d190192bd2
    Fixed -4ca33493a673c2788aa8598fbca2b2f47a69e1b8

    Affected versions

    2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-123653 | CVE-DB