CVE-2026-75857 is a privilege management vulnerability in Hmbown's CodeWhale product affecting versions >=0.8.41 and <0.8.64. The exec_shell_interact tool incorrectly sets its approval requirement to auto, overriding the default required approval for code-executing tools. This allows LLM-controlled stdin to be written into an interactive shell session (such as python3 -i, mysql, ssh, or sudo -i) that has already been approved, without prompting for further approval. An attacker who can inject commands through untrusted content ingested by the agent can execute commands at the privilege level of the approved process. The vulnerability is resolved in version 0.8.64.

An attacker able to inject commands via untrusted input can execute arbitrary commands at the privilege level of an already-approved interactive shell session. This can lead to unauthorized command execution with elevated privileges within the context of the approved process. The vulnerability requires local access or the ability to influence the agent's input content.

Upgrade CodeWhale to version 0.8.64 or later, where this vulnerability is fixed. No other mitigation is indicated by the vendor advisory.