CVE-2026-75856
Full vulnerability record from the local CVENow database.
Description
CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.
Severity
CRITICAL
CVSS score
9.2
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-08-18 16:18:21.133000
Last modified
2026-10-22 22:10:00.250000
View original CVE JSON
{
"id": "CVE-2026-75856",
"sourceIdentifier": "[email protected]",
"published": "2026-08-18T16:18:21.133",
"lastModified": "2026-10-22T22:10:00.250",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations."
},
{
"lang": "es",
"value": "CodeWhale anterior a 0.8.64 contiene una vulnerabilidad de omisión de falsificación de petición del lado del servidor en la lógica de fijación de DNS que no logra prevenir ataques de tiempo de verificación-tiempo de uso. Los atacantes pueden manipular las respuestas de DNS para que fallen las comprobaciones de resolución iniciales y tengan éxito en las peticiones secundarias, permitiendo peticiones a direcciones IP internas y omitiendo las mitigaciones de SSRF."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/deepseek-tui",
"versions": [
{
"version": "0.8.5",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/deepseek-tui",
"versions": [
{
"version": "0.8.5",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/codewhale-tui",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/codewhale",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-18T19:01:51.289617Z",
"id": "CVE-2026-75856",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e",
"source": "[email protected]"
},
{
"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou",
"source": "[email protected]"
},
{
"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}