# CVE-2026-45373: Hmbown CodeWhale SSRF bypass via IPv6 literals in fetch_url

Source: https://junglewise.ai/threats/cve-2026-45373-hmbown-codewhale-ssrf-bypass-via-ipv6-literals-in-fetch-url  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-28. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-45373 · Severity: high · CVSS 7.4 · Published 2026-05-28

DeepSeek TUI is a terminal-based interface for interacting with AI models. A security flaw allows the application to be tricked into making unauthorized requests to internal network resources when processing specific IPv6 addresses. This could allow an attacker to access sensitive data or services on the local network that are normally restricted from outside access.

Technologies: [deepseek-tui (crates.io)](https://junglewise.ai/threats/technologies/deepseek-tui), [Hmbown CodeWhale](https://junglewise.ai/threats/technologies/codewhale). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io), [Hmbown](https://junglewise.ai/threats/vendors/hmbown).

## Quick answers

**Is CVE-2026-45373 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-45373 being exploited in the wild.

**How severe is CVE-2026-45373?** High severity, with a CVSS score of 7.4, published 28 May 2026.

**Which products and versions are affected?** deepseek-tui (crates.io) < 0.8.26, SEMVER:introduced=0,fixed=0.8.26; Hmbown CodeWhale < 0.8.26.

**Is there a fix for CVE-2026-45373?** Yes. deepseek-tui (crates.io): upgrade to 0.8.26 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-45373 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-45373?** Check whether you run deepseek-tui (crates.io) or Hmbown CodeWhale at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- deepseek-tui (crates.io): upgrade to 0.8.26 or later

  ```sh
  cargo update -p deepseek-tui
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the `fetch_url` tool of DeepSeek TUI. While the application attempts to validate hostnames against private IPv6 addresses, it fails to properly sanitize or block direct IPv6 literal inputs such as `http://[::1]`. An attacker can exploit this by providing a crafted URL to the tool, bypassing existing SSRF defenses to reach internal services on the loopback interface or local network. The vulnerability is rooted in `crates/tui/src/tools/fetch_url.rs` and has been addressed in version 0.8.26.

## Affected products

- Hmbown deepseek-tui < 0.8.26

## Identifiers

- CVE-2026-45373
- GHSA-88gh-2526-gfrr

## Timeline

- 2026-05-10: disclosed
- 2026-05-14: advisory: GitHub Advisory published
- 2026-05-28: other: NVD published

## References

- [https://api.github.com/users/JafarAkhondali](https://api.github.com/users/JafarAkhondali)
- [https://github.com/JafarAkhondali](https://github.com/JafarAkhondali)
- [https://api.github.com/users/JafarAkhondali/gists%7B/gist_id%7D](https://api.github.com/users/JafarAkhondali/gists%7B/gist_id%7D)
- [https://api.github.com/users/JafarAkhondali/repos](https://api.github.com/users/JafarAkhondali/repos)
- [https://avatars.githubusercontent.com/u/11364402?v=4](https://avatars.githubusercontent.com/u/11364402?v=4)
- [https://api.github.com/users/JafarAkhondali/events%7B/privacy%7D](https://api.github.com/users/JafarAkhondali/events%7B/privacy%7D)

## Related threats

- [CodeWhale project config allow_shell override enables arbitrary shell execution](https://junglewise.ai/threats/cve-2026-75911-codewhale-project-config-allow-shell-override-enables-arbitrary)
- [CodeWhale rlm_eval approval bypass code execution](https://junglewise.ai/threats/cve-2026-75858-codewhale-rlm-eval-approval-bypass-code-execution)
- [CodeWhale git_blame argument injection allows arbitrary file read](https://junglewise.ai/threats/cve-2026-75912-codewhale-git-blame-argument-injection-allows-arbitrary-file-read)
- [CodeWhale SSRF bypass via TOCTOU in DNS pinning](https://junglewise.ai/threats/cve-2026-75856-codewhale-ssrf-bypass-via-toctou-in-dns-pinning)
- [CodeWhale js_execution environment variable disclosure](https://junglewise.ai/threats/cve-2026-75915-codewhale-js-execution-environment-variable-disclosure)