{"id":"EUVD-2026-60966","enisaUuid":"41c02274-0e36-37f4-8728-e62a6c6daff3","description":"CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim\u0027s system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.","datePublished":"Aug 18, 2026, 3:21:57 PM","dateUpdated":"Aug 20, 2026, 3:24:11 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://www.vulncheck.com/advisories/codewhale-before-arbitrary-file-read-via-instructions\n","aliases":"CVE-2026-75859\nGHSA-62f5-cp2p-vq95\n","assigner":"VulnCheck","epss":0.53,"enisaIdProduct":[{"id":"2fc097e5-b735-3892-984c-d4b9703f1481","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"},{"id":"3bd0de45-8937-3e74-8a6b-f88390a58266","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.8 \u003c0.8.41"}],"enisaIdVendor":[{"id":"e11622bb-05af-33f8-a244-3d574fccec3d","vendor":{"name":"Hmbown"}}],"enisaIdVulnerability":[{"id":"146bd9be-5aae-3ab6-af74-d9d3d98492a1","vulnerability":{"id":"GHSA-62f5-cp2p-vq95","description":"CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository","datePublished":"Sep 4, 2026, 6:00:37 PM","dateUpdated":"Sep 4, 2026, 6:00:37 PM","baseScore":0.0,"references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-75859\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://github.com/Hmbown/CodeWhale\nhttps://www.vulncheck.com/advisories/codewhale-before-arbitrary-file-read-via-instructions\n","enisa_id":"EUVD-2026-60966\n","aliases":"GHSA-62f5-cp2p-vq95\nCVE-2026-75859\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9f78adf2-392e-3532-8630-2aefd487ab4c","vulnerability":{"id":"CVE-2026-75859","description":"CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim\u0027s system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.","datePublished":"Aug 18, 2026, 3:21:57 PM","dateUpdated":"Aug 20, 2026, 3:24:11 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-62f5-cp2p-vq95\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://www.vulncheck.com/advisories/codewhale-before-arbitrary-file-read-via-instructions\n","enisa_id":"EUVD-2026-60966\n","assigner":"VulnCheck","epss":0.53,"dataProcessed":"Nov 5, 2026, 7:15:33 AM","vulnerabilityProduct":[{"id":"1f21450a-a185-3b78-b605-8f5ea65e5060","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.8 \u003c0.8.41"},{"id":"c0f1a2b4-477a-35df-ba07-9c1ef1eab6dc","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"}],"vulnerabilityVendor":[{"id":"3e177e66-735b-35f6-8dd1-39537ee10f94","vendor":{"name":"Hmbown"}}]}}],"enisaIdAdvisory":[]}