CVE-2026-75858

CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vulnerability in the rlm_eval tool. The tool's approval_requirement() returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to run in a python3 interpreter without consulting the user's configured --approval-policy and without any approval prompt or audit step. An attacker can induce the agent to execute arbitrary code via prompt injection in untrusted content the agent reads (a web page, fetched URL, repository file, or MCP tool result); the companion rlm_open tool can stage such content. Code runs on the user's machine at the user's privilege level. Fixed in 0.8.64.

• CWE-94

• https://github.com/Hmbown/CodeWhale/commit/57f3c89471e27ac4032d9791f6885e5d4408c381
• https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f
• https://www.vulncheck.com/advisories/codewhale-rlm-eval-before-remote-code-execution
• https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f

Published

Aug 18, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75852ArcadeDB versions before 26.8.1 fail to enforce SASL authent…9.8
• CVE-2026-75853ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcade…8.8
• CVE-2026-75854ArcadeDB versions before 26.8.1 contain a missing authentica…9.8
• CVE-2026-75855ArcadeDB versions before 26.8.1 fail to sanitize database na…8.7
• CVE-2026-75856CodeWhale before 0.8.64 contains a server-side request forge…8.6
• CVE-2026-75857CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerab…7
• CVE-2026-75859CodeWhale versions before 0.8.64 fail to validate file paths…7.5
• CVE-2026-7586A weakness has been identified in Open5GS up to 2.7.7. Affec…4.3
• CVE-2026-75860The JSON Options WordPress plugin through 0.0.4 does not hav…9.8
• CVE-2026-75861The Ultimate Gift Cards for WooCommerce WordPress plugin bef…6.5
• CVE-2026-75862Photoshop Desktop is affected by an Integer Overflow or Wrap…7.8
• CVE-2026-75863Photoshop Desktop is affected by an Integer Overflow or Wrap…7.8