{"data":{"id":"cc4c04c4-f102-4b0d-be86-f4228df1268c","title":"GHSA-62f5-cp2p-vq95: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository","summary":"CodeWhale's project config merge copies the `instructions` array from a repository's `.codewhale/config.toml` or `.deepseek/config.toml` into the session without path validation. The listed paths are expanded via `expand_path`, read from disk with no workspace boundary check, and injected into the AI system prompt, so a malicious cloned repository can expose files such as `~/.ssh/id_rsa` through the conversation. The advisory notes that the 100KB cap, the `DENY_AT_PROJECT_SCOPE` list and the lack of a tightening guard do not prevent this.","solution":"Fixed in 0.8.64 (commit 43563356b98c6b993085554da82e77370160a31c). Users should upgrade to 0.8.64 or later.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-62f5-cp2p-vq95","publishedAt":"2026-09-04T18:00:37.000Z","cveId":"CVE-2026-75859","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["codewhale@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","codewhale-tui@>= 0.8.41, < 0.8.64 (fixed: 0.8.64)","deepseek-tui@>= 0.8.8, < 0.8.41 (fixed: 0.8.41)","deepseek-tui@>= 0.8.8, < 0.8.41"],"affectedPackageNames":["codewhale","codewhale-tui","deepseek-tui"],"affectedPackageRefs":["cargo:deepseek-tui","npm:deepseek-tui","cargo:codewhale-tui","npm:codewhale"],"affectedVendors":[],"affectedVendorsRaw":["CodeWhale","DeepSeek"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0053,"epssCheckedAt":"2026-11-05T18:10:04.161Z","kevDateAdded":null,"advisoryAliases":["GHSA-62f5-cp2p-vq95"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-04T18:00:37.000Z","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"fixCheckedAt":"2026-10-29T21:31:00.992Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-05-23T21:24:54.230Z","daysToFix":-104,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.840Z"},{"ecosystem":"npm","name":"codewhale","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-23T01:52:26.714Z","daysToFix":-73,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.840Z"},{"ecosystem":"cargo","name":"deepseek-tui","fixedVersion":"0.8.41","matchedVersion":"0.8.41","fixReleasedAt":"2026-07-28T01:14:21.433Z","daysToFix":-38,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.840Z"},{"ecosystem":"cargo","name":"codewhale-tui","fixedVersion":"0.8.64","matchedVersion":"0.8.64","fixReleasedAt":"2026-06-22T15:34:15.010Z","daysToFix":-74,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:00.840Z"}]}}