{"vulnerability": "CVE-2026-51858", "sightings": [{"uuid": "df9962bb-52b1-4f83-a7a5-c9b8a96b9c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51858", "type": "seen", "source": "https://gist.github.com/Ro1ME/1efc7b63bded3e4d39c54ff7b0caedf4", "content": "# CVE-2026-51858\n\n**Type:** Code Execution\n**Product:** camel-ai\n**Affected versions:** 0.2.91a1\u20130.2.91a3\n**Affected component:** `camel/toolkits/terminal_toolkit/terminal_toolkit.py:TerminalToolkit.shell_exec`\n**Reference:** https://github.com/camel-ai/camel/issues/4038\n\n## Description\n\nIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:19.000000Z"}]}