CVE-2026-45310 CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool
Attackers can bypass SSRF protections in CodeWhale's fetch_url tool by using HTTP redirects to access internal network resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-45310?
CVE-2026-45310 is a high-severity server-side request forgery vulnerability in Hmbown CodeWhale, published on 28 May 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to prevent SSRF attacks against internal services (cloud metadata endpoints, localhost, private networks). However, the HTTP client (reqwest) is configured to automatically follow up to 5 redirects (reqwest::redirect::Policy::limited(5)) without re-validating the redirect target against the same SSRF protections. This vulnerability is fixed in 0.8.22.
Weakness: CWE-918
Which versions are affected by CVE-2026-45310?
6 open source packages ship an affected version, including deepseek-tui and deepseek-tui-cli.
| Package | Affected | Fixed in |
|---|---|---|
deepseek-tui crates.io | All versions | 0.8.22 |
deepseek-tui crates.io | All versions | 0.8.22 |
deepseek-tui npm | All versions | 0.8.22 |
deepseek-tui npm | All versions | 0.8.22 |
deepseek-tui-cli crates.io | All versions | 0.8.22 |
deepseek-tui-cli crates.io | All versions | 0.8.22 |
How do I fix CVE-2026-45310?
Upgrade deepseek-tui to 0.8.22 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-45310 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-45310 exists.
Sources
Also known as GHSA-96ff-gc8g-wpvg.