CVE-2026-45310: Hmbown CodeWhale SSRF via HTTP redirect bypass in fetch_url

Executive brief

DeepSeek TUI is a terminal-based interface for interacting with AI models. A security flaw in its web-fetching tool allows attackers to bypass safety filters and access internal network services or cloud metadata. This could lead to the theft of sensitive cloud credentials or private infrastructure data if the AI is tricked into visiting a malicious link.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the fetch_url tool of DeepSeek TUI. While the tool performs an initial check against a restricted-IP blocklist using is_restricted_ip(), the underlying reqwest HTTP client is configured to follow up to five redirects without re-validating the destination IP. An attacker can exploit this by providing a URL that redirects to a restricted address, such as the cloud metadata service (169.254.169.254) or localhost. This can be triggered via prompt injection to exfiltrate sensitive internal data or credentials. The issue is fixed in version 0.8.22.

Affected products

• Hmbown/CodeWhale deepseek-tui < 0.8.22
• Hmbown/CodeWhale deepseek-tui-cli < 0.8.22

Timeline

• 2026-05-09: disclosed
• 2026-05-14: advisory
• 2026-05-14: patched: Version 0.8.22 released

References

• https://api.github.com/users/47Cid
• https://github.com/47Cid
• https://api.github.com/users/47Cid/gists%7B/gist_id%7D
• https://api.github.com/users/47Cid/repos
• https://avatars.githubusercontent.com/u/62759468?v=4
• https://api.github.com/users/47Cid/events%7B/privacy%7D