CVE-2026-75914

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-75914", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-18T15:05:54.225Z", "datePublished": "2026-08-18T15:22:02.234Z", "dateUpdated": "2026-08-20T15:24:01.425Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-08-18T15:22:02.234Z"}, "datePublic": "2026-07-16T00:00:00.000Z", "title": "CodeWhale before 0.8.64 Path Traversal via image_analyze symlink", "descriptions": [{"lang": "en", "value": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "cweId": "CWE-22", "type": "CWE"}]}], "affected": [{"vendor": "Hmbown", "product": "CodeWhale", "defaultStatus": "unaffected", "packageURL": "pkg:cargo/deepseek-tui", "versions": [{"version": "0.8.32", "status": "affected", "versionType": "semver", "lessThan": "0.8.41"}, {"version": "0.8.41", "status": "unaffected", "versionType": "semver"}]}, {"vendor": "Hmbown", "product": "CodeWhale", "defaultStatus": "unaffected", "packageURL": "pkg:npm/deepseek-tui", "versions": [{"version": "0.8.32", "status": "affected", "versionType": "semver", "lessThan": "0.8.41"}, {"version": "0.8.41", "status": "unaffected", "versionType": "semver"}]}, {"vendor": "Hmbown", "product": "CodeWhale", "defaultStatus": "unaffected", "packageURL": "pkg:cargo/codewhale-tui", "versions": [{"version": "0.8.41", "status": "affected", "versionType": "semver", "lessThan": "0.8.64"}, {"version": "0.8.64", "status": "unaffected", "versionType": "semver"}]}, {"vendor": "Hmbown", "product": "CodeWhale", "defaultStatus": "unaffected", "packageURL": "pkg:npm/codewhale", "versions": [{"version": "0.8.41", "status": "affected", "versionType": "semver", "lessThan": "0.8.64"}, {"version": "0.8.64", "status": "unaffected", "versionType": "semver"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-w7wx-5q49-r59w)"}, {"url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e", "tags": ["patch"], "name": "Patch Commit"}, {"name": "VulnCheck Advisory: CodeWhale before 0.8.64 Path Traversal via image_analyze symlink", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/codewhale-before-path-traversal-via-image-analyze-symlink"}], "credits": [{"lang": "en", "value": "fg0x0", "type": "reporter"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-20T13:48:19.946730Z", "id": "CVE-2026-75914", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-20T15:24:01.425Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-75914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T13:48:19.946730Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-20T13:48:21.229Z"}}], "cna": {"title": "CodeWhale before 0.8.64 Path Traversal via image_analyze symlink", "credits": [{"lang": "en", "type": "reporter", "value": "fg0x0"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.32", "lessThan": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}], "packageURL": "pkg:cargo/deepseek-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.32", "lessThan": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}], "packageURL": "pkg:npm/deepseek-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.41", "lessThan": "0.8.64", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}], "packageURL": "pkg:cargo/codewhale-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.41", "lessThan": "0.8.64", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}], "packageURL": "pkg:npm/codewhale", "defaultStatus": "unaffected"}], "datePublic": "2026-07-16T00:00:00.000Z", "references": [{"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w", "name": "GitHub Security Advisory (GHSA-w7wx-5q49-r59w)", "tags": ["vendor-advisory"]}, {"url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e", "name": "Patch Commit", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/codewhale-before-path-traversal-via-image-analyze-symlink", "name": "VulnCheck Advisory: CodeWhale before 0.8.64 Path Traversal via image_analyze symlink", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-08-18T15:22:02.234Z"}}}, "cveMetadata": {"cveId": "CVE-2026-75914", "state": "PUBLISHED", "dateUpdated": "2026-08-20T15:24:01.425Z", "dateReserved": "2026-08-18T15:05:54.225Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-08-18T15:22:02.234Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:cargo/deepseek-tui", "product": "CodeWhale", "vendor": "Hmbown", "versions": [{"lessThan": "0.8.41", "status": "affected", "version": "0.8.32", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "packageURL": "pkg:npm/deepseek-tui", "product": "CodeWhale", "vendor": "Hmbown", "versions": [{"lessThan": "0.8.41", "status": "affected", "version": "0.8.32", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "packageURL": "pkg:cargo/codewhale-tui", "product": "CodeWhale", "vendor": "Hmbown", "versions": [{"lessThan": "0.8.64", "status": "affected", "version": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "packageURL": "pkg:npm/codewhale", "product": "CodeWhale", "vendor": "Hmbown", "versions": [{"lessThan": "0.8.64", "status": "affected", "version": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval."}, {"lang": "es", "value": "Las versiones de CodeWhale anteriores a la 0.8.64 contienen una vulnerabilidad de salto de ruta en la herramienta image_analyze que no logra canonizar los enlaces simb\u00f3licos antes de leer archivos. Los atacantes pueden crear enlaces simb\u00f3licos en el espacio de trabajo que apuntan a archivos externos con extensiones de imagen para filtrar bytes de archivos al endpoint de visi\u00f3n sin la aprobaci\u00f3n del usuario."}], "id": "CVE-2026-75914", "lastModified": "2026-10-22T22:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75914", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-20T13:48:19.946730Z", "version": "2.0.3"}}]}, "published": "2026-08-18T16:18:23.840", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/codewhale-before-path-traversal-via-image-analyze-symlink"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.8.32,0.8.41)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "0.8.41"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "CodeWhale", "source": "cna", "vendor": "Hmbown"}, "product": "codewhale", "vendor": "hmbown"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.8.41,0.8.64)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "0.8.64"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "CodeWhale", "source": "cna", "vendor": "Hmbown"}, "product": "codewhale", "vendor": "hmbown"}], "created": "2026-08-18T17:00:12.835000+00:00", "updated": "2026-08-18T17:30:15.395711+00:00", "vendors": ["hmbown", "hmbown$PRODUCT$codewhale"]}