CVE-2026-75915: CodeWhale: js_execution leaks parent environment to model context via missing env scrub
js_execution exposes parent process environment to model-provided JavaScript
The js_execution tool spawns Node with tokio::process::Command::new without calling the child_env scrubber that exec_shell, the Python REPL, and the MCP launcher all use. Model-provided JavaScript reads process.env and the values flow back to the parent transcript as the tool’s stdout, exposing API keys, cloud credentials, and forge tokens to the next model turn.
References
- github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e
- github.com/Hmbown/CodeWhale/security/advisories/GHSA-h539-c7r8-3xq4
- github.com/advisories/GHSA-h539-c7r8-3xq4
- nvd.nist.gov/vuln/detail/CVE-2026-75915
- www.vulncheck.com/advisories/codewhale-before-environment-variable-leak-via-js-execution
Code Behaviors & Features
Detect and mitigate CVE-2026-75915 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →