Skip to content
OpenAdvisories

Product · camel-ai

owl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85675

    OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching

    OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to …

    camel-ai owl