CyberRota Analysis
AI-GeneratedCodeWhale versions prior to 0.8.64 are vulnerable due to improper validation of the allow_shell configuration parameter, which can be exploited through a malicious .codewhale/config.toml file committed to a repository. This flaw allows attackers to execute arbitrary shell commands on a victim's machine when the repository is cloned and opened in CodeWhale, posing a significant risk of unauthorized access and control. Organizations using CodeWhale should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the repository in CodeWhale, the AI model gains access to exec_shell and task_shell tools, enabling execution of arbitrary shell commands on the victim's machine without explicit user consent.