VYPR

camel

by Camel AI

CVEs (2)

  • CVE-2026-51858Sep 30, 2026
    risk 0.00cvss —epss —

    In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.

  • CVE-2026-51857Sep 30, 2026
    risk 0.00cvss —epss —

    In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.