Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in URL as http://[::1], the SSRF defenses do not work. This vulnerability is fixed in 0.8.26.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-45373 CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when pr… https://www.cve.org/CVERecord?id=CVE-2026-45373
Post summary
The post references CVE-2026-45373, noting an SSRF flaw affecting CodeWhale prior to version 0.8.26, but does not provide PoC, exploit code, or patch details.
CVE-2026-45373 Server-Side Request Forgery in CodeWhale Prior to 0.8.26 via IPv6 Bypass https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45373
Post summary
The text discloses CVE-2026-45373 as an SSRF vulnerability in CodeWhale versions before 0.8.26 that can be triggered via an IPv6 bypass, but it lacks PoC, exploit, patch, or active exploitation details.
🚨*CVE* CVE-2026-45373 CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when pr… https://www.cve.org/CVERecord?id=CVE-2026-45373 ----- Traducción: CVE-2026-45373 Cod… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-45373, providing a brief technical description of an SSRF flaw and linking to the CVE record, but no evidence of exploitation or mitigation efforts.