Read the docs
TI-2026-53141 Aliases CVE-2026-75913GHSA-7j5w-7r7x-9v27

CodeWhale before 0.8.64 Argument Injection via git_show

Priority HIGH 72CWE-73Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-88.

Summary

CodeWhale versions >= 0.3.27 and < 0.8.64 (published as deepseek-tui >= 0.3.27 and < 0.8.41 on npm and 0.3.27 through 0.8.41 on crates.io, and as codewhale / codewhale-tui >= 0.8.41 and < 0.8.64) contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output= is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with prompt injection) can cause an unprompted arbitrary file write at the privilege of the invoking user, targeting sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig. Fixed in codewhale / codewhale-tui 0.8.64 by adding rev validation; the deprecated deepseek-tui crate has no fixed release.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00477 41st percentileScored 2026-11-07
Fix Fixed CodeWhale (Hmbown): 0.8.41, 0.8.64deepseek-tui (npm): 0.8.41+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HmbownCodeWhale0.3.27 – 0.8.41—No fix listedCNA
HmbownCodeWhale0.3.27 to before 0.8.410.8.41Patch availableCNA
HmbownCodeWhale0.8.41 to before 0.8.640.8.64Patch availableCNA
HmbownCodeWhale0.8.41 to before 0.8.640.8.64Patch availableCNA
—deepseek-tui (crates.io)0.3.27 – 0.8.41—No fix listedGHSA-7j5w-7r7x-9v27
—deepseek-tui (npm)0.3.27 to before 0.8.410.8.41Patch availableGHSA-7j5w-7r7x-9v27
—codewhale-tui (crates.io)0.8.41 to before 0.8.640.8.64Patch availableGHSA-7j5w-7r7x-9v27
—codewhale (npm)0.8.41 to before 0.8.640.8.64Patch availableGHSA-7j5w-7r7x-9v27
  • CodeWhale VendorHmbown Affected 0.3.27 – 0.8.41 Fixed in — No fix listed CNA
  • CodeWhale VendorHmbown Affected 0.3.27 to before 0.8.41 Fixed in 0.8.41 Patch available CNA
  • CodeWhale VendorHmbown Affected 0.8.41 to before 0.8.64 Fixed in 0.8.64 Patch available CNA
  • CodeWhale VendorHmbown Affected 0.8.41 to before 0.8.64 Fixed in 0.8.64 Patch available CNA
  • deepseek-tui (crates.io) Vendor— Affected 0.3.27 – 0.8.41 Fixed in — No fix listed GHSA-7j5w-7r7x-9v27
  • deepseek-tui (npm) Vendor— Affected 0.3.27 to before 0.8.41 Fixed in 0.8.41 Patch available GHSA-7j5w-7r7x-9v27
  • codewhale-tui (crates.io) Vendor— Affected 0.8.41 to before 0.8.64 Fixed in 0.8.64 Patch available GHSA-7j5w-7r7x-9v27
  • codewhale (npm) Vendor— Affected 0.8.41 to before 0.8.64 Fixed in 0.8.64 Patch available GHSA-7j5w-7r7x-9v27

Remediation

  • Fix · CNA CodeWhale (Hmbown) Fixed in 0.8.41
  • Fix · CNA CodeWhale (Hmbown) Fixed in 0.8.64
  • Fix · CNA CodeWhale (Hmbown) Fixed in 0.8.64
  • Fix · GHSA-7j5w-7r7x-9v27 deepseek-tui (npm) Fixed in 0.8.41 Advisory →
  • Fix · GHSA-7j5w-7r7x-9v27 codewhale-tui (crates.io) Fixed in 0.8.64 Advisory →
  • Fix · GHSA-7j5w-7r7x-9v27 codewhale (npm) Fixed in 0.8.64 Advisory →

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Hmbown CodeWhale 0.8.41, 0.8.64

    9 records Highest priority Priority HIGH 7 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2026-53100 CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOUPriority HIGH 79
    • TI-2026-53143 CodeWhale before 0.8.64 Environment Variable Leak via js_executionPriority HIGH 77
    • TI-2026-53139 CodeWhale before 0.8.64 Remote Code Execution via allow_shellPriority HIGH 72
    Show all 9 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-75913
  2. 2026-10-03 Alias added: GHSA-7j5w-7r7x-9v27
  3. 2026-10-29 Affected versions changed · CNA

References

Patch 1

Advisory 2

Other 1

  • TI-2026-53100 CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU CVSS 4.0CRITICAL 9.2
  • TI-2026-53143 CodeWhale before 0.8.64 Environment Variable Leak via js_execution CVSS 4.0HIGH 8.7
  • TI-2026-33165 CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files CVSS 3.1CRITICAL 9.6
  • TI-2026-33110 CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval CVSS 3.1CRITICAL 9.6
  • TI-2026-53139 CodeWhale before 0.8.64 Remote Code Execution via allow_shell CVSS 4.0HIGH 8.5
  • TI-2026-53102 CodeWhale rlm_eval before 0.8.64 Remote Code Execution CVSS 4.0HIGH 8.5
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences