在 camel-ai 的 Camel 0.2.91a1、v0.2.91a2 和 v0.2.91a3 版本中,CodeExecutionToolkit 能够通过 SubprocessInterpreter 执行由模型生成的 Python 代码,且缺乏审批边界(即缺少必要的安全确认或授权机制)。
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-51568 | 8.1 HIGH | CVE-2026-51568 |
| CVE-2026-51570 | 8.1 HIGH | CVE-2026-51570 |
| CVE-2026-103227 | 6.3 MEDIUM | GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow |
| CVE-2026-103118 | 4.3 MEDIUM | GraphicsMagick WPG File wpg.c ExtractPostscript recursion |
| CVE-2026-51864 | CVE-2026-51864 | |
| CVE-2026-51856 | CVE-2026-51856 | |
| CVE-2026-51866 | CVE-2026-51866 | |
| CVE-2026-51869 | CVE-2026-51869 | |
| CVE-2026-51862 | CVE-2026-51862 | |
| CVE-2026-51852 | CVE-2026-51852 | |
| CVE-2026-51859 | CVE-2026-51859 | |
| CVE-2026-51853 | CVE-2026-51853 | |
| CVE-2026-51871 | CVE-2026-51871 | |
| CVE-2026-51860 | CVE-2026-51860 | |
| CVE-2026-51872 | CVE-2026-51872 | |
| CVE-2026-51867 | CVE-2026-51867 | |
| CVE-2026-51861 | CVE-2026-51861 | |
| CVE-2026-51858 | CVE-2026-51858 | |
| CVE-2026-51870 | CVE-2026-51870 |
No comments yet