← Database

CVE-2025-26210

HIGH CVSS: 8.8 Published: 2025-09-03 Modified: 2026-06-17

Description

DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NOTE: some third parties have indicated that this is intended behavior.

Affected Platforms

Deepseek Deepseek-V3Deepseek Deepseek-R1Deepseek Deepseek-V2

Weakness Type

CWE-79

References