7.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-45373

CVE-2026-45373: CodeWhale: SSRF‌ IPV6 bypass

CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in‌‌ URL‌ as http://[::1], the SSRF defenses do not work. This vulnerability is fixed in 0.8.26.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-45373

CVE-2026-45373:

7.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
deepseek-tui	rust	< 0.8.26	0.8.26

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) bypass in the fetch_url tool of DeepSeek TUI. The core of the issue lies in the validate_fetch_target function located in crates/tui/src/tools/fetch_url.rs. This function is responsible for ensuring that the URL provided to the fetch_url tool does not point to a restricted internal or loopback IP address.

The vulnerability arises from the fact that the validation logic did not correctly handle IPv6 addresses when they were provided in the standard bracketed format (e.g., http://[::1]/). The code attempted to parse the host part of the URL directly as an IP address. For a URL like http://[::1]/, the host is [::1]. The std::net::IpAddr::parse function in Rust does not handle these brackets, so the parsing would fail. Consequently, the code would not enter the block where it checks if the IP is restricted, effectively bypassing the SSRF protection.

The patch addresses this by explicitly stripping the [ and ] characters from the hostname before attempting to parse it as an IP address. This ensures that bracketed IPv6 literals are correctly normalized and subjected to the same security policy as other IP addresses, preventing the bypass.

Vulnerable functions

deepseek_tui::tools::fetch_url::validate_fetch_target

crates/tui/src/tools/fetch_url.rs

The function `validate_fetch_target` is vulnerable to a Server-Side Request Forgery (SSRF) bypass. Before the patch, the code directly tried to parse the hostname as an IP address. However, it did not account for bracketed IPv6 addresses like `[::1]`. The `parse` method would fail, causing the check for restricted IPs to be skipped. This allowed an attacker to access internal network resources by providing a URL with a local IPv6 address in the bracketed format. The patch fixes this by stripping the brackets before parsing, ensuring the IP is correctly identified and validated.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.