{"id":"EUVD-2026-60971","enisaUuid":"10d760f7-9e60-39f3-bb00-e4be2448cd1b","description":"CodeWhale versions \u003e\u003d 0.3.27 and \u003c 0.8.64 (published as deepseek-tui \u003e\u003d 0.3.27 and \u003c 0.8.41 on npm and 0.3.27 through 0.8.41 on crates.io, and as codewhale / codewhale-tui \u003e\u003d 0.8.41 and \u003c 0.8.64) contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output\u003d is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with prompt injection) can cause an unprompted arbitrary file write at the privilege of the invoking user, targeting sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig. Fixed in codewhale / codewhale-tui 0.8.64 by adding rev validation; the deprecated deepseek-tui crate has no fixed release.","datePublished":"Aug 18, 2026, 3:22:01 PM","dateUpdated":"Oct 29, 2026, 9:16:54 PM","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-7j5w-7r7x-9v27\nhttps://github.com/Hmbown/CodeWhale/commit/9a34b5034d29f05d1f28fa61b04719ca6a741020\nhttps://www.vulncheck.com/advisories/codewhale-before-argument-injection-via-git-show\n","aliases":"CVE-2026-75913\nGHSA-7j5w-7r7x-9v27\n","assigner":"VulnCheck","epss":0.48,"enisaIdProduct":[{"id":"05587e4c-b333-3fe7-9760-a7ebc4fed81b","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.3.27 ≤0.8.41"},{"id":"16c8955b-92d0-3816-8e71-4470682bce55","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.3.27 \u003c0.8.41"},{"id":"17eeb290-8591-3053-8569-cb882a36dc47","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"}],"enisaIdVendor":[{"id":"f4b93a94-f236-3baa-845c-d4f5d97af9cb","vendor":{"name":"Hmbown"}}],"enisaIdVulnerability":[{"id":"3c979d74-d8f4-3543-bb47-70145908cac5","vulnerability":{"id":"CVE-2026-75913","description":"CodeWhale versions \u003e\u003d 0.3.27 and \u003c 0.8.64 (published as deepseek-tui \u003e\u003d 0.3.27 and \u003c 0.8.41 on npm and 0.3.27 through 0.8.41 on crates.io, and as codewhale / codewhale-tui \u003e\u003d 0.8.41 and \u003c 0.8.64) contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output\u003d is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with prompt injection) can cause an unprompted arbitrary file write at the privilege of the invoking user, targeting sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig. Fixed in codewhale / codewhale-tui 0.8.64 by adding rev validation; the deprecated deepseek-tui crate has no fixed release.","datePublished":"Aug 18, 2026, 3:22:01 PM","dateUpdated":"Oct 29, 2026, 9:16:54 PM","status":"PUBLISHED","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H","references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-7j5w-7r7x-9v27\nhttps://github.com/Hmbown/CodeWhale/commit/9a34b5034d29f05d1f28fa61b04719ca6a741020\nhttps://www.vulncheck.com/advisories/codewhale-before-argument-injection-via-git-show\n","enisa_id":"EUVD-2026-60971\n","assigner":"VulnCheck","epss":0.48,"dataProcessed":"Oct 30, 2026, 1:00:38 PM","vulnerabilityProduct":[{"id":"4fc4dea5-cb1e-3750-97ff-12ae8dad28c4","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.8.41 \u003c0.8.64"},{"id":"8302f9a4-14ff-3f03-98da-ec4bfe1d780a","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.3.27 ≤0.8.41"},{"id":"b88482d9-2abe-32fa-9f55-c60bdc08127c","product":{"name":"CodeWhale","vendor":{"name":"Hmbown"}},"product_version":"0.3.27 \u003c0.8.41"}],"vulnerabilityVendor":[{"id":"cd1a14d0-8701-3503-bf85-92160bb2531b","vendor":{"name":"Hmbown"}}]}},{"id":"8a5c0e0c-494f-340b-86c9-75c601381938","vulnerability":{"id":"GHSA-7j5w-7r7x-9v27","description":"CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval","datePublished":"Sep 4, 2026, 6:02:37 PM","dateUpdated":"Sep 4, 2026, 6:02:37 PM","baseScore":0.0,"references":"https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-7j5w-7r7x-9v27\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-75913\nhttps://github.com/Hmbown/CodeWhale/commit/9a34b5034d29f05d1f28fa61b04719ca6a741020\nhttps://github.com/Hmbown/CodeWhale\nhttps://www.vulncheck.com/advisories/codewhale-before-argument-injection-via-git-show\n","enisa_id":"EUVD-2026-60971\n","aliases":"GHSA-7j5w-7r7x-9v27\nCVE-2026-75913\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}