{"id":"EUVD-2026-60969","enisaUuid":"9697d3ad-8acc-3867-a169-ca27a6d8e1dd","description":"CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim\u0027s machine without explicit user consent.","datePublished":"Aug 18, 2026, 3:21:59 PM","dateUpdated":"Aug 18, 2026, 7:07:21 PM","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://www.vulncheck.com/advisories/codewhale-before-remote-code-execution-via-allow-shell\n","aliases":"CVE-2026-75911\nGHSA-gx45-xrj5-g6c4\n","assigner":"VulnCheck","epss":0.25,"enisaIdProduct":[{"id":"1f8efeef-e3aa-3c50-93b5-5d315867289d","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"},{"id":"53c4af98-0bac-35c5-9d1f-13cb6d932504","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.6 \u003c0.8.41"}],"enisaIdVendor":[{"id":"5f8f946d-d7b0-3cda-ad97-9409606fd44b","vendor":{"name":"Hmbown"}}],"enisaIdVulnerability":[{"id":"7eb9b2aa-6b01-3bb9-814b-57250b094284","vulnerability":{"id":"GHSA-gx45-xrj5-g6c4","description":"CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository","datePublished":"Sep 4, 2026, 6:14:09 PM","dateUpdated":"Sep 4, 2026, 6:14:09 PM","baseScore":0.0,"references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-75911\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://github.com/Hmbown/CodeWhale\nhttps://www.vulncheck.com/advisories/codewhale-before-remote-code-execution-via-allow-shell\n","enisa_id":"EUVD-2026-60969\n","aliases":"GHSA-gx45-xrj5-g6c4\nCVE-2026-75911\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"8e85f173-acce-3774-958e-2971c1a679c4","vulnerability":{"id":"CVE-2026-75911","description":"CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim\u0027s machine without explicit user consent.","datePublished":"Aug 18, 2026, 3:21:59 PM","dateUpdated":"Aug 18, 2026, 7:07:21 PM","status":"PUBLISHED","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4\nhttps://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c\nhttps://www.vulncheck.com/advisories/codewhale-before-remote-code-execution-via-allow-shell\n","enisa_id":"EUVD-2026-60969\n","assigner":"VulnCheck","epss":0.25,"dataProcessed":"Nov 5, 2026, 7:15:33 AM","vulnerabilityProduct":[{"id":"6eab0350-2306-3be1-b947-7c899dbb1e6f","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.6 \u003c0.8.41"},{"id":"e593dd25-d238-3b55-aa41-f1d1d9b3e208","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"}],"vulnerabilityVendor":[{"id":"9414bc67-ef6f-3601-9f02-43708f6dffc7","vendor":{"name":"Hmbown"}}]}}],"enisaIdAdvisory":[]}