macOS LPE, tested on 26.5.2, fixed in 26.6
Install macOS DSH LPE
No package.json found — installability could not be checked.
Not checked — and that is not the same as fine
package.json for this repository, so none of the publish spec rules could be applied. We do not know whether dsh plugin add activates anything here.Best-effort git install — unverified, may activate nothing
# 1. add the bundle to a profile — --profile my-profile points at $DSH_HOME/profiles/my-profile
dsh plugin --profile my-profile add github:Lyutoon/macOS_DSH_LPE
# 2. verify: the bundle should show up as a layer in the resolved config
dsh --profile my-profile --dump-config
# 3. boot the profile
dsh --profile my-profileStep 2 is the one that matters here: if --dump-config shows no new layer after the install, this repository is not a bundle and there is nothing to activate.
Before you run it
- A plugin runs with your permissions once loaded: it can read your files, use your credentials and reach the network. Tool approvals do not sandbox it.
- Installing from git resolves a moving branch. Pin a commit —
github:Lyutoon/macOS_DSH_LPE#<commit-sha>— so the code you reviewed is the code you install.
Prerequisites
- API key
- Not required.
- Network access
- Not required at runtime.
- Language
- Shell
Install check
Every field the verdict was derived from, so you can re-derive it yourself
| Field checked | Result | Weight | What the spec says about it |
|---|---|---|---|
| package.json | missing | fatal | no package.json found in the repository |
- Verdict reason
- cannot audit without a package.json
- Rules applied from
- docs/user/develop/basic/publish.md
- Checked at
- 2026-08-15
From the README
Excerpt as published by the author, plain text, unedited
> **root your macOS** in ~2 seconds. > > **Discovered and end-to-end verified by our autonomous agent on 2026-07-18.** | | | | --- | --- | | **Affected** | macOS **< 26.6** (verified on **26.5.2 / build 25F84**, arm64, SIP **on**) | | **Fixed** | macOS **26.6** — fix is present, but the public advisory does **not** enumerate this LPE | | **Severity** | High — unprivileged user → root, no user interaction | | **Type** | Logic / composition LPE (XPC trust assumption + live config read) | | **Components** | `DesktopServicesHelper` (DSH) · `securityd` · `security_authtrampoline` | | **Disclosure** | Independently reported to Apple; no CVE, no credit granted | Full unprivileged-user → root run on macOS 26.5.2 (~2s, no GUI prompt): **[`lpe.mov`](./lpe.mov)** https://github.com/user-attachments/a
Related entries
Nearest entries by similarity — this one landed in no themed cluster
Dsh Plugin Greet
0lidaxiang
DeepSeek Harness is a plugin-based system for building AI agents. Everything, from tools and models to the web UI, can be added or replaced as a plugin.
Helloagents
hellowind777
一个自主的高级智能伙伴，不仅分析问题，更持续工作直到完成实现和验证。
Dsh Plugins
Wanbinyu
Community catalog of plugins and tools for DeepSeek Harness (dsh)
Dsh Plugin Session Delete
lsz-asd
Delete DeepSeek Harness sessions from the UI: header danger button + sidebar session-row menu item (no conversation jump), risk-consent dialog with session name/id, stops running agents first, in-place list refresh without page reload. Works in web and the desktop client.
Dsh Workflow
icetomoyo
把Claude Code的UltraCode模式带给DSH，把 DSH 的一次性多 Agent 调度，升级为可生成、可保存、可治理、可观察、可恢复的 Workflow 层
Dsh Genui
omdsh-dev
GenUI for DeepSeek Harness: interactive UI components rendered inline in assistant replies via the dsh-ui fence — layout, charts, plots, forms, quizzes, mermaid, 3D scenes, and an action event loop back to the model. Ships the fence-teaching host plugin, the browser renderer (client half), and the genui skill.