CVE-2026-75857

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-75857
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75857.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-75857
Aliases
  • GHSA-g29h-pfmp-qp9r
Published
2026-08-18T15:21:56.357Z
Modified
2026-08-20T03:55:24.548567639Z
Severity
  • 7.3 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact
Details

CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the execshellinteract (alias execinteract) tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an already-approved long-running interactive shell (e.g., a python3 -i REPL, mysql, ssh, or sudo -i session) without any approval prompt. An attacker who can inject instructions via untrusted content the agent ingests (a fetched page, MCP result, or repo file) can cause commands to run at the privilege level of that approved process. Fixed in 0.8.64.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-269"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75857.json"
}
References

Affected packages

Git / github.com/hmbown/codewhale

Affected ranges

Type
GIT
Repo
https://github.com/hmbown/codewhale
Events
Introduced
433d7cb6e987f2938e0e0c67e894f17676a2194b
Introduced
5fa24733e9a1d11315506309b8edb0fdf2b94f04
Fixed
5fa24733e9a1d11315506309b8edb0fdf2b94f04
Fixed
9d2e6a89f58610d5f426ff26533a2bf312023790
Fixed
57f3c89471e27ac4032d9791f6885e5d4408c381
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.3.10"
        },
        {
            "fixed": "0.8.41"
        },
        {
            "introduced": "0.8.41"
        },
        {
            "fixed": "0.8.64"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.3.10
v0.3.11
v0.3.12
v0.3.13
v0.3.14
v0.3.16
v0.3.17
v0.3.18
v0.3.19
v0.3.20
v0.3.21
v0.3.22
v0.3.23
v0.3.24
v0.3.25
v0.3.26
v0.3.27
v0.3.28
v0.3.31
v0.3.32
v0.3.33
v0.4.0
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.2
v0.6.1
v0.6.2
v0.6.3
v0.6.4
v0.6.5
v0.6.6
v0.6.7
v0.7.0
v0.7.1
v0.7.2
v0.7.4
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.7.9
v0.8.0
v0.8.1
v0.8.10
v0.8.11
v0.8.12
v0.8.13
v0.8.14
v0.8.15
v0.8.17
v0.8.18
v0.8.19
v0.8.2
v0.8.20
v0.8.21
v0.8.22
v0.8.23
v0.8.24
v0.8.25
v0.8.26
v0.8.27
v0.8.28
v0.8.29
v0.8.3
v0.8.30
v0.8.31
v0.8.32
v0.8.33
v0.8.35
v0.8.36
v0.8.37
v0.8.38
v0.8.39
v0.8.4
v0.8.40
v0.8.41
v0.8.42
v0.8.43
v0.8.44
v0.8.45
v0.8.46
v0.8.48
v0.8.49
v0.8.5
v0.8.50
v0.8.51
v0.8.52
v0.8.53
v0.8.54
v0.8.55
v0.8.56
v0.8.57
v0.8.58
v0.8.59
v0.8.6
v0.8.60
v0.8.61
v0.8.62
v0.8.63
v0.8.7
v0.8.8
v0.8.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75857.json"