CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement:…

CodeWhale, a DeepSeek + MiMo coding agent, contained a critical vulnerability from versions 0.3.0 to 0.8.23. The run_tests tool executed cargo test with automatic approval, allowing arbitrary code execution without user consent. In malicious repositories, this could lead to shell command execution, credential theft, or persistence establishment. The vulnerability was amplified by AGENTS.md auto-loading, which could trigger proactive test execution. Fixed in version 0.8.23.