Hmbown vulnerabilities

Products

• CodeWhale 4

Latest Hmbown CVEs

Newest publication first

1. CVE-2026-45311 CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval

   Published 2026-05-28

   Critical·CVSS 9.6 EPSS 0.57%

   CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user approval prompt. cargo test compiles and executes arbitrary code: test binaries,...

2. CVE-2026-45310 CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool

   Published 2026-05-28

   High·CVSS 7.4 EPSS 0.28%

   CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to prevent SSRF attacks against internal services (cloud metadata endpoints, localho...

3. CVE-2026-45373 CodeWhale: SSRF‌ IPV6 bypass

   Published 2026-05-28

   High·CVSS 7.4 EPSS 0.30%

   CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in‌‌ URL‌ as http://[::1], the SSRF defenses do not work. This vulnerability is fixed in 0.8.26.

4. CVE-2026-45374 CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

   Published 2026-05-28

   Critical·CVSS 9.6 EPSS 0.39%

   CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create tool spawns durable sub-agents that inherit two insecure defaults, allow_shell defaults to true (config.rs:1499: self.allow_shell.unwrap_or(true)) and auto_approve defaults to true (task_man...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.