CVE-2026-75859
Full vulnerability record from the local CVENow database.
Description
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
Severity
HIGH
CVSS score
8.7
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-08-18 16:18:21.787000
Last modified
2026-10-22 22:10:00.250000
View original CVE JSON
{
"id": "CVE-2026-75859",
"sourceIdentifier": "[email protected]",
"published": "2026-08-18T16:18:21.787",
"lastModified": "2026-10-22T22:10:00.250",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration."
},
{
"lang": "es",
"value": "Versiones de CodeWhale anteriores a la 0.8.64 fallan al validar las rutas de archivo en el campo de instrucciones de configuración del proyecto, permitiendo a los atacantes leer archivos arbitrarios en el sistema de la víctima. Un archivo .codewhale/config.toml malicioso en un repositorio clonado puede especificar rutas fuera del espacio de trabajo que son leídas e inyectadas en el prompt del sistema de IA para exfiltración."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/deepseek-tui",
"versions": [
{
"version": "0.8.8",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/deepseek-tui",
"versions": [
{
"version": "0.8.8",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/codewhale-tui",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/codewhale",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-20T13:48:22.456191Z",
"id": "CVE-2026-75859",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c",
"source": "[email protected]"
},
{
"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/codewhale-before-arbitrary-file-read-via-instructions",
"source": "[email protected]"
}
]
}