CVE-2026-75914

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.64

Description The image analyze tool fails to canonicalize symlinks before reading files, leading to a path traversal issue. This allows attackers to create workspace symlinks that point to external files with image extensions, enabling the leakage of file bytes to the vision endpoint without user approval. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update to version 0.8.64 or later.