Description
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hmbown | CodeWhale | 0.8.8 – < 0.8.41, 0.8.41 – < 0.8.64 | 0.8.41 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | codewhale-tui | >= 0.8.41, < 0.8.64 | 0.8.64 | GHSA-62f5-cp2p-vq95 |
| crates.io | deepseek-tui | >= 0.8.8 | — | GHSA-62f5-cp2p-vq95 |
| npm | codewhale | >= 0.8.41, < 0.8.64 | 0.8.64 | GHSA-62f5-cp2p-vq95 |
| npm | deepseek-tui | >= 0.8.8, < 0.8.41 | 0.8.41 | GHSA-62f5-cp2p-vq95 |
References
- GitHub Security Advisory (GHSA-62f5-cp2p-vq95) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: CodeWhale before 0.8.64 Arbitrary File Read via instructions third-party-advisory