EUVD-2026-60963Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable and unauthenticated (PR:N), but reliable exploitation needs DNS control and a TOCTOU race (AC:H); SSRF reaches other internal systems (S:C) exposing data (C:H) with no integrity/availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.
AnalysisAI
Server-side request forgery in CodeWhale before 0.8.64 lets remote attackers reach internal-only IP addresses through the agent's fetch_url tool by exploiting a time-of-check-time-of-use gap in its DNS-pinning defense. Because the pre-fetch validator treated a failed DNS lookup as a pass-through ('let the HTTP request proceed and fail naturally'), an attacker who controls DNS responses can make the safety check see a non-resolving or benign answer while the real request resolves to an internal address, bypassing the SSRF allow/deny policy. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker can (a) influence the target URL/hostname passed to CodeWhale's fetch_url tool and (b) manipulate DNS resolution for that hostname so the initial validation check and the subsequent HTTP request resolve differently - i.e., control of authoritative DNS or the ability to race/rebind responses (the TOCTOU window). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-impact SSRF given its context: the vendor CVSS 4.0 rates it 9.2 with AV:N/AC:L/PR:N/UI:N and confidentiality impact on both the vulnerable system (VC:H) and a subsequent system (SC:H), reflecting that reaching internal services can expose sensitive data such as cloud metadata endpoints or internal APIs. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker feeds CodeWhale's fetch_url tool a URL on a hostname whose authoritative DNS they control (or can spoof), timing responses so the pre-fetch validation sees a failing or public answer while the subsequent actual request resolves to an internal address like 169.254.169.254. The agent then issues the request server-side, returning internal-only content (e.g., cloud metadata or internal service responses) to the attacker. … |
| Remediation | Vendor-released patch: upgrade to CodeWhale 0.8.64 or later, which changes validate_fetch_target to reject hosts that fail DNS preflight and to require a validated resolved address before any fetch (fix commit 26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e; advisory GHSA-6v2g-fpxh-pmmh). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all CodeWhale deployments and document current versions in use. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Environment variable inheritance in CodeWhale's js_execution tool prior to version 0.8.64 allows crafted JavaScript payl
Unauthenticated file disclosure in CodeWhale before 0.8.64 allows arbitrary local file reads via the image_analyze tool'
Arbitrary file read in CodeWhale before version 0.8.64 allows an attacker to exfiltrate files from a developer's worksta
Argument injection in CodeWhale's git_show tool (versions 0.8.41-0.8.63) allows an attacker to cause arbitrary file writ
Shell command injection in CodeWhale before version 0.8.64 enables arbitrary code execution on a victim developer's mach
Remote code execution in CodeWhale (packages codewhale and codewhale-tui) versions 0.8.41 through 0.8.63 allows an attac
Argument injection in CodeWhale versions before 0.8.64 exposes arbitrary files on the host system by accepting unsanitiz
Prompt-injection-driven privilege escalation in CodeWhale 0.8.41-0.8.63 allows an attacker who can place malicious instr
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today