The reported vulnerability is an argument injection flaw in CodeWhale's git_show utility. The rev parameter supplied by the model is injected directly into the git show command line without validation or an end‑of‑options separator. This allows values beginning with the option prefix ‑‑output= to be interpreted as git flags, letting an attacker redirect output or alter file destinations. An attacker can exploit this by hosting a malicious repository and combining it with prompt injection techniques, causing the utility to perform an arbitrary file write at the privilege level of the user executing CodeWhale.

Affected versions are CodeWhale 0.8.41 through 0.8.63, inclusive. The vendor Hmbown lists the product CodeWhale, and the vulnerability is present in the codewhale and codewhale‑tui packages across those releases.

The CVSS score of 8.5 indicates a high impact and moderate to high exploitation likelihood. EPSS is not available, and the vulnerability is not yet listed in CISA's KEV catalog. Exploitation requires the git_show tool to run with untrusted input; because the tool is registered as auto‑approved and advertised as read‑only, the attack surface is broad in environments that automatically trust CodeWhale repositories. The lack of an end‑of‑options sentinel and the ability to write arbitrary files such as ~/.ssh/authorized_keys or ~/.bashrc could lead to privilege escalation or persistence on the host.