DeepSeek Harness flaw lets AI agents exit the file-system sandbox without approval

DeepSeek Harness versions 0.1.1-rc.2 and earlier contained a flaw that allowed a sandboxed AI agent to disable its own sandbox with a single command. This could allow it to write outside its workspace without an approval prompt.