{"id":"CVE-2026-51858","published":"2026-09-30T21:17:11.777","lastModified":"2026-10-02T20:17:02.550","description":"In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/1efc7b63bded3e4d39c54ff7b0caedf4","tags":[]},{"url":"https://github.com/camel-ai/camel/issues/4038","tags":[]},{"url":"https://github.com/camel-ai/camel/issues/4038","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/1efc7b63bded3e4d39c54ff7b0caedf4","tags":[]},{"url":"https://github.com/camel-ai/camel/issues/4038","tags":[]},{"url":"https://github.com/camel-ai/camel/issues/4038","tags":[]}],"hasPoc":true,"ai":{"summary":"This flaw allows prompt-driven shell command execution without an approval boundary, enabling attackers to execute arbitrary commands with potentially high impact.","exploitability":"Exploitation is relatively straightforward given the lack of an approval boundary, requiring only a terminal input to execute commands.","blast_radius":"If exploited, this vulnerability could lead to complete system compromise, data loss, and unauthorized command execution.","remediation":"Upgrade to camel-ai camel 0.2.91a4 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","shell-exec","command-execution"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:44:26.525Z"}}