Code Execution in CodeWhale via Malicious Config File

Executive Summary

CVE-2026-75911 is a vulnerability in CodeWhale versions before 0.8.64 where the allow_shell configuration parameter in project config files is not properly validated. Attackers can enable arbitrary shell command execution by adding a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, allowing it to run arbitrary commands on the victim's machine without explicit consent.

Useful 0 Not Useful 0

Detection Guidance

Check for repositories with .codewhale/config.toml or .deepseek/config.toml files containing allow_shell = true. Inspect CodeWhale logs for exec_shell or task_shell tool activations. Use system monitoring tools to detect unexpected shell command executions.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to execute arbitrary shell commands on your machine without your knowledge or consent. If you clone and open a malicious repository in CodeWhale, the AI model can run commands that may steal data, install malware, or perform other harmful actions. The attack requires minimal interaction—just running CodeWhale in the affected repository directory.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using CodeWhale may face compliance violations if sensitive data is compromised due to this flaw.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade CodeWhale to version 0.8.64 or later. Add allow_shell to DENY_AT_PROJECT_SCOPE list. Review and remove any .codewhale/config.toml files with allow_shell = true in repositories. Monitor for suspicious shell command executions.

Useful 0 Not Useful 0