CVE-2026-75859 CodeWhale before 0.8.64 Arbitrary File Read via instructions
Attackers can read arbitrary files on the victim's system via malicious project config instructions in CodeWhale, leading to data exfiltration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-75859?
CVE-2026-75859 is a high-severity path traversal vulnerability in Hmbown CodeWhale, published on 18 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
Weakness: CWE-22
Which versions are affected by CVE-2026-75859?
8 open source packages ship an affected version, including codewhale-tui, deepseek-tui and codewhale.
| Package | Affected | Fixed in |
|---|---|---|
codewhale-tui crates.io | From 0.8.41 | 0.8.64 |
codewhale-tui crates.io | From 0.8.41 | 0.8.64 |
deepseek-tui crates.io | From 0.8.8 | None |
deepseek-tui crates.io | From 0.8.8 | None |
codewhale npm | From 0.8.41 | 0.8.64 |
codewhale npm | From 0.8.41 | 0.8.64 |
2 more packages
deepseek-tui npm | From 0.8.8 | 0.8.41 |
deepseek-tui npm | From 0.8.8 | 0.8.41 |
How do I fix CVE-2026-75859?
Upgrade codewhale-tui to 0.8.64 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-75859 being exploited?
There is no known exploitation of CVE-2026-75859 in the wild and no public exploit code.
Sources
Also known as GHSA-62f5-cp2p-vq95.