GHSA-6r9c-47f4-cxxxCriticalCVSS 9.8

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt...

Vendor

GitHub Security Advisories

Published

September 30, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51858 →

📋 Description

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.

🔗 References (4)