CVE-2026-75859
CVE-2026-75859 · CodeWhale before 0.8.64 Arbitrary File Read via instructions
This page contains facts from public vulnerability sources. Check the original advisory before updating.
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
CVSS 8.7 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
codewhale
- Versions
- ≥ 0.8.8, < 0.8.41: Affected (semver)
- 0.8.41: Not affected (semver)
Update to 0.8.41
codewhale
- Versions
- ≥ 0.8.41, < 0.8.64: Affected (semver)
- 0.8.64: Not affected (semver)
Update to 0.8.64
deepseek-tui crates.io
- Affected ranges
- SEMVER: ≥ 0.8.8
No fix published
deepseek-tui npm
- Affected ranges
- SEMVER: ≥ 0.8.8, < 0.8.41
Update to 0.8.41
codewhale-tui crates.io
- Affected ranges
- SEMVER: ≥ 0.8.41, < 0.8.64
Update to 0.8.64
codewhale npm
- Affected ranges
- SEMVER: ≥ 0.8.41, < 0.8.64
Update to 0.8.64