CVE-2026-75858: CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vulnerabi

CodeWhale versions 0.8.41 through 0.8.63 have a remote code execution vulnerability (the ability for attackers to run code on your machine) in the rlm_eval tool. The tool automatically approves and runs Python code supplied by an AI model without asking the user for permission or checking their security settings, allowing attackers to inject malicious instructions into web pages or files that the AI reads and then executes on the user's computer at their privilege level.