{"data":{"id":"27b7327e-d453-4e3d-bba3-73780bbb2338","title":"GHSA-c6mw-8xh8-gpq6: CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval","summary":"The `git_blame` tool in DeepSeek-TUI passes the model-supplied `rev` parameter unvalidated into the argv of `git blame`. A `rev` value of `--contents=/path/to/secret` makes the tool echo the targeted file's contents into the tool result, which returns to the model and appears in the chat transcript, enabling arbitrary file read at the invoking user's privilege. The tool is registered with `ApprovalRequirement::Auto`, so no approval is requested.","solution":"Fixed in 0.8.64 (commit 9a34b5034d29f05d1f28fa61b04719ca6a741020). Users should upgrade to 0.8.64 or later.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-c6mw-8xh8-gpq6","publishedAt":"2026-09-04T18:11:45.000Z","cveId":"CVE-2026-75912","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["codewhale@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","codewhale-tui@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","deepseek-tui@>= 0.3.27, < 0.8.41 (fixed: 0.8.41)","deepseek-tui@>= 0.3.27, <= 0.8.41"],"affectedPackageNames":["codewhale","codewhale-tui","deepseek-tui"],"affectedPackageRefs":["cargo:deepseek-tui","npm:deepseek-tui","cargo:codewhale-tui","npm:codewhale"],"affectedVendors":[],"affectedVendorsRaw":["CodeWhale","DeepSeek-TUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00446,"epssCheckedAt":"2026-11-05T00:11:43.030Z","kevDateAdded":null,"advisoryAliases":["GHSA-c6mw-8xh8-gpq6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-04T18:11:45.000Z","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"fixCheckedAt":"2026-10-29T21:30:58.756Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"cargo","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-07-28T01:14:21.433Z","daysToFix":-38,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:58.611Z"},{"ecosystem":"npm","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:58.611Z"},{"ecosystem":"cargo","name":"codewhale-tui","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-22T15:34:15.010Z","daysToFix":-74,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:58.611Z"},{"ecosystem":"npm","name":"codewhale","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-23T01:52:26.714Z","daysToFix":-73,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:58.611Z"}]}}