CVE-2026-75911 PUBLISHED

CodeWhale before 0.8.64 Remote Code Execution via allow_shell

Assigner: VulnCheck
Reserved: 18.08.2026 Published: 18.08.2026 Updated: 18.08.2026

CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim's machine without explicit user consent.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.5

Product Status

Vendor Hmbown
Product CodeWhale
Versions Default: unaffected
  • affected from 0.8.6 to 0.8.41 (excl.)
  • Version 0.8.41 is unaffected
Vendor Hmbown
Product CodeWhale
Versions Default: unaffected
  • affected from 0.8.6 to 0.8.41 (excl.)
  • Version 0.8.41 is unaffected
Vendor Hmbown
Product CodeWhale
Versions Default: unaffected
  • affected from 0.8.41 to 0.8.64 (excl.)
  • Version 0.8.64 is unaffected
Vendor Hmbown
Product CodeWhale
Versions Default: unaffected
  • affected from 0.8.41 to 0.8.64 (excl.)
  • Version 0.8.64 is unaffected

Credits

  • sondt99 reporter
  • dungNHVhust reporter

References

Problem Types

  • Improper Control of Generation of Code ('Code Injection') CWE