{"data":{"id":"b77be339-d4d4-4603-817b-0786dbd8e9d0","title":"GHSA-g29h-pfmp-qp9r: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)","summary":"CodeWhale's exec_shell_interact tool is marked ApprovalRequirement::Auto, so model-supplied input written to an already-approved interactive shell (such as a python3 -i REPL, mysql, ssh or sudo -i) runs without an approval prompt. Any untrusted content the agent reads can steer that input, giving command execution at the privilege level of the approved process.","solution":"Fixed in 0.8.64 (commit 57f3c89471e27ac4032d9791f6885e5d4408c381). Users should upgrade to 0.8.64 or later.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-g29h-pfmp-qp9r","publishedAt":"2026-09-04T18:02:10.000Z","cveId":"CVE-2026-75857","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["codewhale@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","codewhale-tui@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","deepseek-tui@>= 0.3.10, < 0.8.41 (fixed: 0.8.41)","deepseek-tui@>= 0.3.10, <= 0.8.41"],"affectedPackageNames":["codewhale","codewhale-tui","deepseek-tui"],"affectedPackageRefs":["cargo:deepseek-tui","npm:deepseek-tui","cargo:codewhale-tui","npm:codewhale"],"affectedVendors":[],"affectedVendorsRaw":["CodeWhale"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00155,"epssCheckedAt":"2026-11-05T18:10:03.196Z","kevDateAdded":null,"advisoryAliases":["GHSA-g29h-pfmp-qp9r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-04T18:02:10.000Z","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"fixCheckedAt":"2026-10-29T21:31:00.238Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.093Z"},{"ecosystem":"npm","name":"codewhale","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-23T01:52:26.714Z","daysToFix":-73,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.093Z"},{"ecosystem":"cargo","name":"codewhale-tui","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-22T15:34:15.010Z","daysToFix":-74,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.093Z"},{"ecosystem":"cargo","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-07-28T01:14:21.433Z","daysToFix":-38,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.093Z"}]}}