What is GHSA-q2f7-8vfc-xg45?

GHSA-q2f7-8vfc-xg45 is a security advisory published by GitHub Security Advisories with Critical severity. In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced...

Which CVE IDs does GHSA-q2f7-8vfc-xg45 cover?

GHSA-q2f7-8vfc-xg45 covers the following CVE IDs: CVE-2026-51857. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q2f7-8vfc-xg45?

GHSA-q2f7-8vfc-xg45 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-q2f7-8vfc-xg45CriticalCVSS 9.8

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced...

Vendor

GitHub Security Advisories

Published

September 30, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51857 →

📋 Description

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51857
https://github.com/camel-ai/camel/issues/4037
https://gist.github.com/Ro1ME/78606e0763520d6519897e90b305d3cd
https://github.com/advisories/GHSA-q2f7-8vfc-xg45