CVE-2026-75913

Deferred Deferred - Pending Action

Argument Injection in CodeWhale git_show Tool

Publication date: 2026-08-18

Last updated on: 2026-10-29

Assigner: VulnCheck

Description

CodeWhale versions >= 0.3.27 and < 0.8.64 (published as deepseek-tui >= 0.3.27 and < 0.8.41 on npm and 0.3.27 through 0.8.41 on crates.io, and as codewhale / codewhale-tui >= 0.8.41 and < 0.8.64) contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output= is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with prompt injection) can cause an unprompted arbitrary file write at the privilege of the invoking user, targeting sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig. Fixed in codewhale / codewhale-tui 0.8.64 by adding rev validation; the deprecated deepseek-tui crate has no fixed release.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-10-29

Generated

2026-11-08

AI Q&A

2026-08-18

EPSS Evaluated

2026-11-07

NVD

CVE-2026-75913

EUVD

EUVD-2026-60971

Affected Vendors & Products

Vendor	Product	Version / Range
codewhale	codewhale-tui	From 0.8.41 (inc) to 0.8.64 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

CVE-2026-75913 is an argument injection vulnerability in CodeWhale's git_show tool affecting versions >=0.8.41 and <0.8.64. The rev parameter, supplied by the model, is passed unvalidated into the git show command without an --end-of-options sentinel. Attackers can exploit this by using values like --output= to write arbitrary files on the user's system, including sensitive files such as ~/.ssh/authorized_keys or ~/.bashrc.

Detection Guidance

Check CodeWhale version with npm list codewhale or cargo list codewhale-tui. If version is >=0.8.41 and <0.8.64, the system is vulnerable. Review git_show tool usage in logs for suspicious --output= flags or file writes to sensitive paths like ~/.ssh/authorized_keys.

Impact Analysis

This vulnerability allows an attacker to write arbitrary files to your system without your approval, even though the tool is advertised as read-only. Sensitive files like SSH keys, shell configurations, or Git settings could be overwritten, potentially leading to unauthorized access or system compromise. Exploitation requires a malicious repository and prompt injection.

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially exposing sensitive data or system configurations. For GDPR, it may violate integrity and confidentiality principles. For HIPAA, unauthorized file access could compromise protected health information. Compliance risks depend on the specific data affected and organizational policies.

Mitigation Strategies

Upgrade CodeWhale to version 0.8.64 or later. If upgrading is not possible, disable auto-approval for git_show tool and add --end-of-options sentinel to git show commands. Avoid using untrusted repositories with CodeWhale.

Hi! I’m here to help you understand CVE-2026-75913. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...