CVE-2026-75856
HighCVSS 8.6Summary
CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.
Risk Assessment
An attacker can access internal network resources, potentially leading to exposure of sensitive data, privilege escalation, or further attacks on the infrastructure.
Recommendation
Update CodeWhale to version 0.8.64 or later, which includes a fix. Additionally, consider strengthening network security and monitoring outbound traffic.
Original NVD description (English source)
CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can manipulate DNS responses to fail initial resolution checks and succeed on secondary requests, allowing requests to internal IP addresses and bypassing SSRF mitigations.