CVE-2026-123653— esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting input

Quick assessment

Affected

esengine DeepSeek-Reasonix

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 esengine DeepSeek-Reasonix 2.52.0 及以下版本中发现了一个安全漏洞。受影响的是文件 internal/memory/doc.go 中的 discoverDocs 函数。该漏洞源于对用于大语言模型（LLM）提示的输入未能正确进行中和处理，攻击者可远程发起利用。该漏洞的利用方式已公开披露，存在被实际利用的风险。升级至 2.53.0 版本可修复此问题，补丁标识符为 4ca33493a673c2788aa8598fbca2b2f47a69e1b8。建议立即升级受影响的组件。

CVSS 6.3 · Medium Updated Nov 06, 2026

Possible ATT&CK Techniques 3 AI

T1059 · Command and Scripting Interpreter T1055 · Process Injection T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting input

Source: CVE Program / CVE List V5

Vulnerability Description

A security vulnerability has been detected in esengine DeepSeek-Reasonix up to 2.52.0. Affected is the function discoverDocs of the file internal/memory/doc.go. The manipulation leads to improper neutralization of input used for llm prompting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.53.0 is able to address this issue. The identifier of the patch is 4ca33493a673c2788aa8598fbca2b2f47a69e1b8. It is suggested to upgrade the affected component.

Source: CVE Program / CVE List V5