CVE-2026-75856

CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e
https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh
https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou
https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh

Configurations

No configuration.

History

22 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) CodeWhale anterior a 0.8.64 contiene una vulnerabilidad de omisión de falsificación de petición del lado del servidor en la lógica de fijación de DNS que no logra prevenir ataques de tiempo de verificación-tiempo de uso. Los atacantes pueden manipular las respuestas de DNS para que fallen las comprobaciones de resolución iniciales y tengan éxito en las peticiones secundarias, permitiendo peticiones a direcciones IP internas y omitiendo las mitigaciones de SSRF.

Information

Published : 2026-08-18 16:18

Updated : 2026-10-22 22:10

NVD link : CVE-2026-75856

Mitre link : CVE-2026-75856

CVE.ORG link : CVE-2026-75856

JSON object : View

Products Affected

No product.

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2026-75856", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75856", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-18T19:01:51.289617Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.5", "lessThan": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}], "packageURL": "pkg:cargo/deepseek-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.5", "lessThan": "0.8.41", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.41", "versionType": "semver"}], "packageURL": "pkg:npm/deepseek-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.41", "lessThan": "0.8.64", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}], "packageURL": "pkg:cargo/codewhale-tui", "defaultStatus": "unaffected"}, {"vendor": "Hmbown", "product": "CodeWhale", "versions": [{"status": "affected", "version": "0.8.41", "lessThan": "0.8.64", "versionType": "semver"}, {"status": "unaffected", "version": "0.8.64", "versionType": "semver"}], "packageURL": "pkg:npm/codewhale", "defaultStatus": "unaffected"}]}], "published": "2026-08-18T16:18:21.133", "references": [{"url": "https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations."}, {"lang": "es", "value": "CodeWhale anterior a 0.8.64 contiene una vulnerabilidad de omisi\u00f3n de falsificaci\u00f3n de petici\u00f3n del lado del servidor en la l\u00f3gica de fijaci\u00f3n de DNS que no logra prevenir ataques de tiempo de verificaci\u00f3n-tiempo de uso. Los atacantes pueden manipular las respuestas de DNS para que fallen las comprobaciones de resoluci\u00f3n iniciales y tengan \u00e9xito en las peticiones secundarias, permitiendo peticiones a direcciones IP internas y omitiendo las mitigaciones de SSRF."}], "lastModified": "2026-10-22T22:10:00.250", "sourceIdentifier": "disclosure@vulncheck.com"}