CodeWhale versions prior to 0.8.64 allow an attacker who can supply JavaScript to the js_execution tool to execute arbitrary code that reads the parent process's environment variables. The executed code can then send private data such as API keys, cloud credentials, and authentication tokens back to the model context, resulting in sensitive information leakage.

Vulnerable components include CodeWhale by Hmbown. Any deployment using CodeWhale before version 0.8.64 is susceptible.

The CVSS score of 8.7 indicates high severity, while the EPSS score is missing and the vulnerability is not listed in CISA KEV, so known exploitation data is not available. The likely attack vector is the execution of malicious JavaScript through the js_execution facility; this can be triggered by a local user with code injection privileges or potentially by a remote attacker if the tool is exposed to untrusted input points. Given the information exposure it can compromise confidentiality of secrets stored in process environment variables.