7.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-45310

CVE-2026-45310: CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool

CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to prevent SSRF attacks against internal services (cloud metadata endpoints, localhost, private networks). However, the HTTP client (reqwest) is configured to automatically follow up to 5 redirects (reqwest::redirect::Policy::limited(5)) without re-validating the redirect target against the same SSRF protections. This vulnerability is fixed in 0.8.22.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-45310

CVE-2026-45310:

7.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
deepseek-tui	rust	< 0.8.22	0.8.22
deepseek-tui-cli	rust	< 0.8.22	0.8.22
deepseek-tui	npm	< 0.8.22	0.8.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The security vulnerability is a Server-Side Request Forgery (SSRF) located in the fetch_url tool of the DeepSeek TUI application. The root cause of the vulnerability was the application's failure to validate HTTP redirect targets. The FetchUrlTool::run function would validate the initial URL against a blocklist of restricted IP addresses but then used an HTTP client configured to automatically follow up to five redirects. An attacker could exploit this by providing a legitimate-looking URL that would redirect to a sensitive internal endpoint, such as a cloud provider's metadata service (e.g., 169.254.169.254). Since the redirect target was never validated, the SSRF check was bypassed.

The patch, identified in commit 8b60275981940d09dd8b15b757b60fb7411f59ee, rectifies this flaw. It modifies the FetchUrlTool::run function to disable automatic redirects in the reqwest client (redirect::Policy::none()). Instead, it implements a manual loop to handle redirects. Within this loop, each new URL from a Location header is extracted and explicitly passed to a new validation function, validate_fetch_target, before any request is sent. This ensures that all URLs in a redirect chain are subject to the same SSRF and network policy checks, effectively closing the vulnerability.

Vulnerable functions

FetchUrlTool::run

crates/tui/src/tools/fetch_url.rs

The `run` function was vulnerable to SSRF because it configured the `reqwest` HTTP client to automatically follow redirects (`Policy::limited(MAX_REDIRECTS)`). While it performed an SSRF check on the initial URL, it did not validate the URLs of subsequent redirects. This allowed an attacker to provide a seemingly safe URL that redirects to a restricted internal service, bypassing the security check. The patch remediates this by disabling automatic redirects and implementing a manual loop that validates each URL in a redirect chain using the new `validate_fetch_target` function.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.