CVE-2026-75913: CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerability in the

CodeWhale versions 0.8.41 through 0.8.63 have an argument injection vulnerability (a flaw where user input is improperly combined with commands) in its git_show tool that allows attackers to write files to a user's system through prompt injection (tricking the AI with hidden commands in input). Because the tool is marked as auto-approved and read-only, an attacker could exploit this to modify sensitive files like SSH keys or shell configuration files without user consent.