CVE-2025-26210

n/a / n/a PUBLISHED

Description (CNA)

DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NOTE: some third parties have indicated that this is intended behavior.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://hackmd.io/@MrqrFIlhQFi7vUwkqbrXDw/deepseek
https://youtu.be/IgQwy52FVT4
https://deepseek.com

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.