A AegiFlow
HIGHCVSS 8.5EPSS 0.3%

CVE-2026-75913

CVE-2026-75913 updated by NVD

Published
2026-09-04
Modified
2026-09-10
EPSS percentile
26%
Sources
github-advisory, nvd

Summary

CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed unvalidated into the git show argv without an --end-of-options sentinel, so a value beginning with --output= is interpreted as a git flag. Because the tool is registered as auto-approved and advertised as read-only, an attacker (via a malicious repository combined with prompt injection) can cause an unprompted arbitrary file write at the privilege of the invoking user, targeting sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig. Fixed in 0.8.64 by adding rev validation.

Affected packages

EcosystemPackageAffected versionsFixed versions
npmcodewhale0.8.64
npmdeepseek-tui0.8.41
rustcodewhale-tui0.8.64
rustdeepseek-tui

Remediation: Upgrade to 0.8.64 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.