Product by Hmbown

    Hmbown CodeWhale

    13 known vulnerabilities in Hmbown CodeWhale (Hmbown), 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hmbown CodeWhale (Hmbown)
    HighCVE-2026-75915

    CodeWhale before 0.8.64 Environment Variable Leak via js_execution

    		7.5
    CriticalCVE-2026-75856

    CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU

    		8.6
    CriticalCVE-2026-45311

    CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval

    		9.6
    CriticalCVE-2026-75913

    CodeWhale before 0.8.64 Argument Injection via git_show

    		9.3
    HighCVE-2026-75859

    CodeWhale before 0.8.64 Arbitrary File Read via instructions

    		7.5
    HighCVE-2026-75914

    CodeWhale before 0.8.64 Path Traversal via image_analyze symlink

    		7.5
    HighCVE-2026-75912

    CodeWhale before 0.8.64 Argument Injection via git_blame

    		7.4
    CriticalCVE-2026-45374

    CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

    		9.6
    HighCVE-2026-75858

    CodeWhale rlm_eval before 0.8.64 Remote Code Execution

    		7.8
    HighCVE-2026-75911

    CodeWhale before 0.8.64 Remote Code Execution via allow_shell

    		7.8
    HighCVE-2026-75857

    CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact

    		7.0
    HighCVE-2026-45373

    CodeWhale: SSRF‌ IPV6 bypass

    		7.4
    HighCVE-2026-45310

    CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool

    		7.4

    News

    All products by Hmbown