GHSA-g29h-pfmp-qp9r: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

CodeWhale's `exec_shell_interact` function has a privilege escalation vulnerability where it sends commands controlled by an AI model into an already-approved interactive shell (like Python REPL or MySQL) without requiring user approval. An attacker can use prompt injection (tricking the AI by hiding instructions in its input) to make the model send malicious commands that execute at whatever privilege level that shell has, potentially allowing root or remote command execution.