CVE-2026-75859: CodeWhale before 0.8.64 Arbitrary File Read via instructions
CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and injected into the AI system prompt for exfiltration.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CodeWhaleto a version that resolves this vulnerability.Fixed in 0.8.64 - Compensating control
Ensure the cloned repository’s .codewhale/config.toml (project config instructions field) does not include file paths that resolve outside the workspace; block/validate paths to remain within the workspace during ingestion.
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users running a CodeWhale version earlier than 0.8.64 are exposed when they clone or open a repository containing a malicious .codewhale/config.toml file. The issue is network-reachable in the sense that an attacker can distribute a crafted repository; no prior privileges or user interaction beyond handling that repository are indicated by the supplied data.
What must an attacker do to exploit it?
An attacker needs to place a crafted instructions value in .codewhale/config.toml that references files outside the workspace. CodeWhale then reads those files and injects their contents into the AI system prompt, enabling exfiltration.
What can be done if patching is not immediately possible?
Upgrade CodeWhale to version 0.8.64 or later. If upgrading is not immediately possible, do not clone or open untrusted repositories containing .codewhale/config.toml, and inspect that file for instructions paths that reference locations outside the workspace.