Argument Injection Vulnerability in CodeWhale git_show Tool

CodeWhale and codewhale-tui versions 0.8.41 through 0.8.63 contain an argument injection vulnerability within the git_show tool, assigned as CVE-2026-75913. The vulnerability stems from the tool failing to properly validate the rev parameter before passing it to the git show command line. By supplying an input starting with --output=, an attacker can inject malicious flags into the git execution process. Because the tool is registered for auto-approval and marketed as a read-only utility, it is often trusted by users and automated workflows. An attacker can leverage this trust, potentially in combination with prompt injection within a malicious repository, to cause the git binary to overwrite sensitive files such as ~/.ssh/authorized_keys, ~/.bashrc, or ~/.gitconfig with attacker-controlled content. This flaw allows for lateral movement, persistence, or credential harvesting at the privilege level of the user executing the tool. The issue is resolved in version 0.8.64 by implementing input validation for the rev parameter.

Impact

Successful exploitation allows for arbitrary file writes, enabling an attacker to gain persistence or modify system configurations on the host machine. This poses a significant risk to developers and automated CI/CD environments where CodeWhale is utilized, potentially leading to unauthorized access to developer environments or the execution of malicious commands via modified shell profiles.

Recommendation

• Upgrade all instances of codewhale and codewhale-tui to version 0.8.64 or later immediately.
• Audit logs for the execution of git commands spawned by CodeWhale to identify anomalous command-line arguments, specifically those containing --output=.
• Restrict the permissions of users executing the CodeWhale tool to limit the potential impact of an arbitrary file write on sensitive user-specific configuration files.