Description
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.
Critical · 9.8
CVE-2026-51858
EUVD-2026-90422GHSA-6r9c-47f4-cxxx
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an app…
Published Sep 30, 2026 · Updated Oct 2, 2026 · Assigned by mitre