CVE-2026-51858: Pypi/camel-ai vulnerability

Published Sep 30, 2026

Updated

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary.

Affected Software

1 affected component

pypi/camel-ai=0.2.91a1, =0.2.91a2, =0.2.91a3

Event History

Sep 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:17 PM

Description

Frequently Asked Questions

Which releases should be prioritized for investigation?

The affected releases are camel 0.2.91a1, v0.2.91a2, and v0.2.91a3.

What does an attacker need to influence to trigger the issue?

An attacker needs to supply or influence prompts that reach TerminalToolkit.shell_exec. The issue allows those prompts to drive shell command execution without an approval boundary.

CVE-2026-51858: Pypi/camel-ai vulnerability

Affected Software

Event History

Frequently Asked Questions

Which releases should be prioritized for investigation?

What does an attacker need to influence to trigger the issue?

Company

Resources

Contact

Frequently Asked Questions

Which releases should be prioritized for investigation?

What does an attacker need to influence to trigger the issue?