Which versions of CodeWhale are affected by EUVD-2026-60972?

CodeWhale IDE extension versions before 0.8.64 contain an unauthenticated file disclosure vulnerability that allows attackers to extract sensitive files from developer computers through malicious…. A patch is available.

Is there a public PoC exploit available for EUVD-2026-60972?

Yes, a public proof-of-concept exploit is available for EUVD-2026-60972. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate EUVD-2026-60972?

Within 24 hours, audit all CodeWhale installations to identify instances running versions before 0.8.64 and instruct development teams to refrain from opening untrusted repositories until patching is complete. Within 7 days, deploy CodeWhale 0.8.64 or later through your organization's IDE extension manager and verify deployment across all developer workstations; escalate to teams using manual installations to ensure timely updates. Within 30 days, audit systems to confirm 100% patch coverage, review any available endpoint telemetry to determine if the vulnerability was exploited during the pre-patch window, and document the patching timeline for compliance records.

CodeWhale EUVD-2026-60972

Q: What is the CVSS score of EUVD-2026-60972?

EUVD-2026-60972 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2026-75914 HIGH

Path Traversal (CWE-22)

2026-08-18 VulnCheck

GHSA-w7wx-5q49-r59w

Path Traversal Codewhale Hmbown

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network delivery via crafted repo, but user must open project (UI:R); no privileges on victim system needed; confidentiality only.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Aug 18, 2026 - 15:51 vuln.today

Analysis Generated

Aug 18, 2026 - 15:51 vuln.today

CVE Published

Aug 18, 2026 - 15:22 cve.org

HIGH 8.7

DescriptionCVE.org

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without user approval.

AnalysisAI

Unauthenticated file disclosure in CodeWhale before 0.8.64 allows arbitrary local file reads via the image_analyze tool's failure to resolve symbolic links before enforcing workspace boundaries. An attacker who can place a crafted symlink (named with an image extension) inside a victim's workspace - for example via a malicious git repository - can cause CodeWhale's vision endpoint to read and transmit the symlink target's bytes without user approval. No CISA KEV listing or public exploit has been identified, but the CVSS 4.0 score of 8.7 and high confidentiality impact make this a meaningful risk for developers who open untrusted projects in CodeWhale.

Technical ContextAI

CodeWhale (CPE: cpe:2.3:a:hmbown:codewhale:*:*:*:*:*:*:*:*) is a Rust-based TUI AI coding assistant. The vulnerable component is the image_analyze tool in crates/tui/src/vision/tools.rs. Prior to 0.8.64, path validation checked for explicit traversal components (RootDir, ParentDir, Prefix) using Path::components() but then joined the user-supplied path directly to the workspace root without calling canonicalize() - meaning symbolic links inside the workspace were followed by the OS after the boundary check passed. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) precisely describes this class: syntactic path validation is insufficient when the filesystem resolves indirection at read time. The fix in commit 26de44a8 introduces a resolve_image_path() helper that canonicalizes both the workspace root and the joined candidate path, then asserts the fully resolved path still falls under the workspace prefix - correctly defeating symlink escapes.

RemediationAI

Upgrade to CodeWhale 0.8.64 or later, which incorporates the fix from commit 26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e (https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e). The patch is confirmed available per vendor advisory at https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-w7wx-5q49-r59w. If immediate upgrade is not possible, the most effective compensating control is to avoid opening untrusted or externally sourced repositories in CodeWhale until patched; organizations can enforce this via policy restricting CodeWhale use to internally audited codebases. Disabling the image_analyze tool at the configuration level, if supported, would also eliminate the vulnerable code path without affecting other functionality - verify whether CodeWhale's tool permissions allow this. Note that simply auditing workspace contents for symlinks before use is operationally fragile and should not be relied upon as a sole control.