Description
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.
Critical · 9.8
CVE-2026-51857
EUVD-2026-90423GHSA-q2f7-8vfc-xg45
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter …
Published Sep 30, 2026 · Updated Oct 2, 2026 · Assigned by mitre