CodeWhale versions before 0.8.64 contain a path traversal flaw in the image_analyze tool that allows an attacker to create a symbolic link inside the workspace pointing to any file with an image extension. When the tool processes the link, it reads the target file without canonicalizing symlinks, causing the file contents to be transmitted to the vision endpoint. This can leak arbitrary file bytes without user consent.

The vulnerability affects all releases of Hmbown’s CodeWhale prior to version 0.8.64. The issue is limited to the image_analyze component and does not depend on other product modules.

With a CVSS score of 8.7 the flaw is considered a high‑severity vulnerability. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalogue. The attack requires that the attacker be able to create or manipulate symlinks within a CodeWhale workspace, which may be achieved by an authenticated user or by compromising the workspace environment. If exploited, the attacker can read sensitive files and exfiltrate data through the vision API.