CVE-2026-123989 ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission

A vulnerability (CVE-2026-123989) was discovered in ESEngine DeepSeek-Reasonix version 1.33.0 and earlier. The loadGitStatus function in the build.rs file of the Build Script Execution component is affected, allowing remote attackers to exploit permission issues. To mitigate this, users should upgrade to version 1.34.0, which includes a patch (a54659c2c5b0f4e57aae2b44d41f421c6a71e8cf).

RSS Score 0 11/7/2026, 3:00:22 PM Original Source
Save an API key to vote.