CVE-2026-75914
Full vulnerability record from the local CVENow database.
Description
CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval.
Severity
HIGH
CVSS score
8.7
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-08-18 16:18:23.840000
Last modified
2026-10-22 22:10:00.250000
View original CVE JSON
{
"id": "CVE-2026-75914",
"sourceIdentifier": "[email protected]",
"published": "2026-08-18T16:18:23.840",
"lastModified": "2026-10-22T22:10:00.250",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval."
},
{
"lang": "es",
"value": "Las versiones de CodeWhale anteriores a la 0.8.64 contienen una vulnerabilidad de salto de ruta en la herramienta image_analyze que no logra canonizar los enlaces simbólicos antes de leer archivos. Los atacantes pueden crear enlaces simbólicos en el espacio de trabajo que apuntan a archivos externos con extensiones de imagen para filtrar bytes de archivos al endpoint de visión sin la aprobación del usuario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/deepseek-tui",
"versions": [
{
"version": "0.8.32",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/deepseek-tui",
"versions": [
{
"version": "0.8.32",
"lessThan": "0.8.41",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.41",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/codewhale-tui",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
},
{
"vendor": "Hmbown",
"product": "CodeWhale",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/codewhale",
"versions": [
{
"version": "0.8.41",
"lessThan": "0.8.64",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.8.64",
"versionType": "semver",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-20T13:48:19.946730Z",
"id": "CVE-2026-75914",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e",
"source": "[email protected]"
},
{
"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/codewhale-before-path-traversal-via-image-analyze-symlink",
"source": "[email protected]"
}
]
}