Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CVE-2026-45310: deepseek‑tui tools may access internal servers via redirects
CVE-2026-45310 · published 5 months ago
Summary
The Deepseek terminal agents (deepseek‑tui and deepseek‑tui‑cli) verify the first web address they fetch, but they follow up to five redirects without checking the new address. An attacker could use this to make the tool contact internal services such as cloud metadata or private network resources, potentially exposing sensitive data. Update the tools to version 0.8.22 or later, which adds the missing check.
What to do
- Update hmbown deepseek-tui to version 0.8.22.
- Update hmbown deepseek-tui-cli to version 0.8.22.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| rust | hmbown | deepseek-tui |
< 0.8.22 Fix: upgrade to 0.8.22
|
| rust | hmbown | deepseek-tui-cli |
< 0.8.22 Fix: upgrade to 0.8.22
|
| npm | hmbown | deepseek-tui |
< 0.8.22 Fix: upgrade to 0.8.22
|
Original advisory text
CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to prevent SSRF attacks against internal services (cloud metadata endpoints, localhost, private networks). However, the HTTP client (reqwest) is configured to automatically follow up to 5 redirects (reqwest::redirect::Policy::limited(5)) without re-validating the redirect target against the same SSRF protections. This vulnerability is fixed in 0.8.22.
References
- https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-96ff-gc8g-wpvg
- https://github.com/advisories/GHSA-96ff-gc8g-wpvg
- https://github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.22 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45310... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-45310 Vendor Advisory
- https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-96ff-gc8g-wpvg Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published28 May 2026
Updated4 Nov 2026
First seen14 May 2026
Track software like this
Free during beta