4 matches found
CVE-2026-75857
creationtimestamp| type| source ---|---|--- 2026-09-04 20:35:15+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g29h-pfmp-qp9r...
CVE-2026-75857
CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...
CVE-2026-75857 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact
CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...
CVE-2026-75857 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact
CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...