Security Advisory

CVE-2026-45373

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-28 17:27:59

Last updated 2026-05-30 02:05:45

Assigner GitHub_M

CVSS score 7.4

State PUBLISHED

Description

CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in‌‌ URL‌ as http://[::1], the SSRF defenses do not work. This vulnerability is fixed in 0.8.26.

← Browse all CVEs View on cve.org ↗