{"vulnerability": "CVE-2026-75858", "sightings": [{"uuid": "7b694775-4ebd-4428-ae23-d3f2a7c94cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75858", "type": "seen", "source": "https://gist.github.com/alon710/c7af24523c00756cedb6917806c4592c", "content": "# CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75858\n\n## Summary\nCVE-2026-75858 is a critical authorization bypass vulnerability in CodeWhale's interactive execution tools, allowing silent, unprompted execution of model-supplied Python and shell commands on the host machine. The defect affects versions between 0.8.41 and 0.8.64, bypassing any configured approval policies via indirect prompt injection.\n\n## TL;DR\nA logical flaw in CodeWhale's tool engine allows local and remote code execution by bypassing the '--approval-policy' via 'rlm_eval' and 'exec_shell_interact' tools.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Local (User-assisted)\n- **CVSS v3.1 Score**: 7.8 (High)\n- **CVSS v4.0 Score**: 8.5 (High)\n- **EPSS Score**: 0.00267 (18.59th percentile)\n- **Exploit Status**: PoC available\n- **Impact**: Arbitrary Code Execution\n\n## Affected Systems\n\n- CodeWhale AI Agent Workspace\n- codewhale-tui Rust Crate\n- codewhale Rust Crate\n- **codewhale-tui**: >= 0.8.41, < 0.8.64 (Fixed in: `0.8.64`)\n- **codewhale**: >= 0.8.41, < 0.8.64 (Fixed in: `0.8.64`)\n\n## Mitigation\n\n- Upgrade codewhale and codewhale-tui to version 0.8.64 or higher.\n- Sandbox execution workspaces inside isolated Docker containers.\n- Restrict the agent's outbound network connections to external domains.\n\n**Remediation Steps:**\n1. Run 'cargo update -p codewhale-tui' to pull the patched version (>= 0.8.64).\n2. Restart any running instances of the CodeWhale terminal user interface (TUI).\n3. Implement endpoint process auditing policies to track child processes of the CodeWhale agent.\n\n## References\n\n- [NVD CVE-2026-75858 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-75858)\n- [GitHub Security Advisory GHSA-wrj3-vj8c-784f](https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/codewhale-rlm-eval-before-remote-code-execution)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75858) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T20:32:55.554794Z"}, {"uuid": "08cff793-3145-44cd-8b8e-05deefa73391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75858", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "content": "", "creation_timestamp": "2026-09-04T20:35:04.843969Z"}]}