CVE-2026-75912: CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

Arbitrary file read at the privilege of the user running DeepSeek-TUI, via malicious repository content combined with prompt injection (the threat model already documented in CVE-2026-45311).

Reachable as the invoking user:

• ~/.ssh/id_rsa, ~/.ssh/id_ed25519, and other private keys
• ~/.aws/credentials, ~/.config/gh/hosts.yml, ~/.netrc
• .env files anywhere in the filesystem
• Any project file outside the workspace the tool would normally restrict to

The leaked contents land in the model’s context. The same model that obeyed the prompt-injection in step one can be instructed to forward the leak via fetch_url (network-policy permitting), summarize it in chat, or write it into a tool output the attacker can later retrieve.