CVE-2026-75911

CodeWhale before 0.8.64 Remote Code Execution via allow_shell

State: Published
Severity: 8.5 High
Published: Aug 18, 2026
Updated: Aug 18, 2026
Reserved: Aug 18, 2026

Description

CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim's machine without explicit user consent.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	VulnCheck

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
CodeWhaleHmbown	0.8.6 to before 0.8.41Affected 0.8.41Not affected
CodeWhaleHmbown	0.8.6 to before 0.8.41Affected 0.8.41Not affected
CodeWhaleHmbown	0.8.41 to before 0.8.64Affected 0.8.64Not affected
CodeWhaleHmbown	0.8.41 to before 0.8.64Affected 0.8.64Not affected

References

GitHub Security Advisory (GHSA-gx45-xrj5-g6c4)vendor-advisory
Patch Commitpatch
VulnCheck Advisory: CodeWhale before 0.8.64 Remote Code Execution via allow_shellthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.