PT-2026-41166 · Hmbown+1 · Codewhale+2

47Cid · Published 2026-05-14 · Updated 2026-05-28 · CVE-2026-45311

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CodeWhale versions 0.3.0 through 0.8.22

Description The run tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, allowing it to run without user approval. Because cargo test compiles and executes arbitrary code—including test binaries, build.rs build scripts, and proc macros—a malicious repository can execute arbitrary shell commands, exfiltrate credentials, or establish persistence. This risk is increased by the AGENTS.md file, which is automatically loaded into the system prompt and can be used to instruct the model to run tests proactively at the start of a session.

Recommendations Update to version 0.8.23. As a temporary workaround, restrict the use of the run tests tool when working with untrusted repositories.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-45311

GHSA-WX44-2Q6H-J6P8

Affected Products

Codewhale

Deepseek-Tui

Deepseek-Tui-Cli

References · 8

• 🔥 https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wx44-2q6h-j6p8 · Exploit
• https://osv.dev/vulnerability/GHSA-wx44-2q6h-j6p8 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45311 · Security Note
• https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-wx44-2q6h-j6p8 · Note
• https://github.com/Hmbown/DeepSeek-TUI · Note
• https://github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.23 · Note
• https://twitter.com/VulmonFeeds/status/2060100014597091379 · Twitter Post
• https://twitter.com/CVEnew/status/2060091968512766213 · Twitter Post