The fetch_url tool in CodeWhale validates the initial URL against a restricted IP blocklist to stop SSRF attacks. However, the HTTP client is configured to follow up to five redirects without re‑applying the blocklist check. A malicious URL that redirects to an internal address therefore bypasses the SSRF protection, allowing the attacker to cause CodeWhale to retrieve resources from internal services such as cloud metadata endpoints, localhost, or private networks. This can lead to disclosure of sensitive internal data, privilege escalation, or disruption of internal services.

Hmbown CodeWhale versions prior to 0.8.22 are affected. Users running any release before 0.8.22 that uses fetch_url are vulnerable.

The CVSS score of 7.4 classifies this flaw as High severity. EPSS is not available and the vulnerability is not listed in CISA KEV, suggesting that public exploitation activity has not yet been observed. The likely attack vector is either local or remote depending on how the fetch_url command is invoked; an attacker who can supply a malicious URL to CodeWhale can induce the tool to resolve an internal address via a redirect chain. Proper validation of redirect targets would mitigate the risk, but without it the flaw can be exploited with access to the fetch_url interface.