Description
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Hmbown CodeWhale
Default version status: unaffected
0.8.8 to < 0.8.41affected0.8.41unaffected
pkg:cargo/deepseek-tuiHmbown CodeWhale
Default version status: unaffected
0.8.8 to < 0.8.41affected0.8.41unaffected
pkg:npm/deepseek-tuiHmbown CodeWhale
Default version status: unaffected
0.8.41 to < 0.8.64affected0.8.64unaffected
pkg:cargo/codewhale-tuiHmbown CodeWhale
Default version status: unaffected
0.8.41 to < 0.8.64affected0.8.64unaffected
pkg:npm/codewhale