---
id: 8924
title: "DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agent"
source_domain: about.gitlab.com
source_url: "https://about.gitlab.com/blog/deepseek-reasonix-vulnerability-discovered/"
published_at: "2026-10-02T00:00:00Z"
tags: ["ai-security", "supply-chain", "gitlab", "ai-coding", "deepseek", "config-poisoning"]
phying_url: "https://phying.com/item/8924"
lang: en
---

# DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agent

## Summary

GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.

## Intelligence Metadata

- **Sources:** about.gitlab.com
- **Published:** 2026-10-02T00:00:00Z
- **Original:** https://about.gitlab.com/blog/deepseek-reasonix-vulnerability-discovered/
- **Phying News:** https://phying.com/item/8924