VULNERABILITY INTELLIGENCE

CVE-2026-45311

CVSS score9.6 CRITICAL

EPSS probability0.57%

CISA KEVNot currently listed

Published2026-05-28

Last modified2026-10-26

Description

CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user approval prompt. cargo test compiles and executes arbitrary code: test binaries, build.rs build scri…