CVE-2026-45374 Details
Description
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create tool spawns durable sub-agents that inherit two insecure defaults, allow_shell defaults to true (config.rs:1499: self.allow_shell.unwrap_or(true)) and auto_approve defaults to true (task_manager.rs:297: auto_approve: Some(true)). When a user approves a task_create call (which requires ApprovalRequirement::Required), they approve what appears to be a benign work prompt. However, the spawned sub-agent silently receives unrestricted, unapproved shell access. This vulnerability is fixed in 0.8.26.
A vulnerability in CodeWhale, a DeepSeek + MiMo coding agent, prior to version 0.8.26, allows for unauthorized shell access through the task_create tool. The vulnerability arises because sub-agents spawned by task_create inherit two insecure default settings: allow_shell, which defaults to true, and auto_approve, which also defaults to true. When a user approves a task_create call, they believe they are authorizing a benign work prompt. However, the sub-agent receives unrestricted shell access without additional approval. This issue is fixed in version 0.8.26.
Users can update to CodeWhale version 0.8.26 or later, where this vulnerability is fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 28, 2026CISA-ADP
Assessed May 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-72w5-pf8h-xfp4 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-72w5-pf8h-xfp4 | [email protected] | AdvisoryExploitRemedyVendor |
| https://github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.26 | [email protected] | Release NotesVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Hmbown CodeWhale | < 0.8.26 (semver) |
CPE
Remediation
| |
| Hmbown DeepSeek-TUI | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 30, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | New CVE Received | [email protected] |