CodeWhale versions prior to 0.8.64 do not properly validate file paths in the project config instructions field, enabling path traversal attacks. An attacker can craft a malicious .codewhale/config.toml file in a cloned repository to specify paths outside the workspace. When processed, these paths are read and their contents injected into the AI system prompt, potentially leaking sensitive information. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity, with network attack vector, no privileges or user interaction required, and high impact on confidentiality.

An attacker can read arbitrary files on the victim's system by exploiting this vulnerability, potentially leading to sensitive data disclosure. The injected data into the AI system prompt could be exfiltrated or misused. There are no known exploits in the wild at this time.

A fix is available in CodeWhale version 0.8.64 and later. Users should upgrade to version 0.8.64 or newer to remediate this vulnerability. No vendor advisory content was provided to indicate alternative mitigations or temporary fixes.