Argument Injection Vulnerability in CodeWhale by Hmbown
CVE-2026-75912
8.3HIGH
What is CVE-2026-75912?
Prior to version 0.8.64, CodeWhale features a vulnerability within the git_blame tool that allows for argument injection, enabling attackers to manipulate the rev parameter. By exploiting this flaw, an attacker can input malicious rev values, such as --contents=/path/to/file, leading to the potential exfiltration of sensitive files, which may include SSH keys and other credentials. This vulnerability highlights the importance of robust input validation to safeguard sensitive data.
Affected Version(s)
CodeWhale 0.3.27 < 0.8.41
CodeWhale 0.3.27 < 0.8.41
CodeWhale 0.8.41 < 0.8.64