CVE-2026-51858

The camel-ai camel framework versions v0.2.91a1 , v0.2.91a2 , and v0.2.91a3 are vulnerable to unauthorized command execution. Specifically, the TerminalToolkit.shell_exec function allows for prompt-driven shell command execution because it lacks an approval boundary . This flaw enables an attacke...

EUVD-2026-90422

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

EUVD-2026-90423

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary...

CVE-2026-51857

The camel-ai camel framework versions v0.2.91a1 , v0.2.91a2 , and v0.2.91a3 are vulnerable to unauthorized code execution. The CodeExecutionToolkit component can execute Python code generated by a model via the SubprocessInterpreter because it lacks an approval boundary . This allows for the dire...