CVE-2026-45373: CodeWhale: SSRF‌ IPV6 bypass

Synopsis

A server-side request forgery (SSRF) bypass affects CodeWhale, the DeepSeek and MiMo coding agent for the terminal, in versions before 0.8.26. The vulnerability is reachable over the network without authentication, but requires a victim to take an action; an attacker who tricks a user into triggering a crafted request can supply a raw IPv6 literal (such as http://[::1]) in a URL, bypassing the hostname-based SSRF defenses that would otherwise block requests to private addresses. Successful exploitation lets the attacker read responses from internal services that should be inaccessible from outside the host. Note: the description states a fix exists in 0.8.26, but no fix version has been formally published in the advisory record; HarborGuard is tracking the advisory for confirmed patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable service must be reachable over the network; an attacker sends the crafted IPv6-literal URL across the internet or internal network to the CodeWhale agent.

• AuthenticationNot required

  No credentials or account are needed to deliver the malicious request to the affected service.

• Victim interactionRequired

  A user must perform an action (such as opening a crafted project, file, or link) that causes CodeWhale to issue the forged internal request.

• Attack complexityDetail

  Exploit conditions are straightforward and reliable; no race conditions or special memory layout are required to trigger the IPv6 bypass.

Blast Radius

• Reads responses from internal HTTP services bound to loopback or private IPv6 addresses that are normally unreachable from outside the host.
• Exposes internal API endpoints, metadata services (such as cloud instance metadata), or administrative interfaces that assume network isolation as their only protection.
• Leaks sensitive data returned by those internal services, including credentials, tokens, or configuration details, depending on what the internal service responds with.