Deepseek Reasonix
Monthly
OS command injection in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls a repository's contents to execute arbitrary commands with the privileges of the desktop application's diff viewer. The attacker supplies a crafted .gitattributes file that registers a clean/smudge filter plus a .git/config that binds that filter driver to an arbitrary shell command; when the victim opens that repository's workspace-changes diff view, the app's internal/gitcmd module runs git diff and the malicious filter is executed. Exploitation is strictly local (AV:L) and requires user interaction - the victim must open or view the attacker-supplied repository - and no public exploit code or confirmed active exploitation has been identified at time of analysis, so the risk is genuine but bounded rather than a mass-exploitable network flaw.
OS command injection in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls a repository's contents to execute arbitrary commands with the privileges of the desktop application's diff viewer. The attacker supplies a crafted .gitattributes file that registers a clean/smudge filter plus a .git/config that binds that filter driver to an arbitrary shell command; when the victim opens that repository's workspace-changes diff view, the app's internal/gitcmd module runs git diff and the malicious filter is executed. Exploitation is strictly local (AV:L) and requires user interaction - the victim must open or view the attacker-supplied repository - and no public exploit code or confirmed active exploitation has been identified at time of analysis, so the risk is genuine but bounded rather than a mass-exploitable network flaw.