在 camel-ai 的 Camel 0.2.91a1、v0.2.91a2 和 v0.2.91a3 版本中,TerminalToolkit.shell_exec 允许通过提示词驱动执行 shell 命令,且缺乏审批边界控制。
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-51568 | 8.1 HIGH | CVE-2026-51568 |
| CVE-2026-51570 | 8.1 HIGH | CVE-2026-51570 |
| CVE-2026-103227 | 6.3 MEDIUM | GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow |
| CVE-2026-103118 | 4.3 MEDIUM | GraphicsMagick WPG File wpg.c ExtractPostscript recursion |
| CVE-2026-51864 | CVE-2026-51864 | |
| CVE-2026-51856 | CVE-2026-51856 | |
| CVE-2026-51866 | CVE-2026-51866 | |
| CVE-2026-51869 | CVE-2026-51869 | |
| CVE-2026-51862 | CVE-2026-51862 | |
| CVE-2026-51852 | CVE-2026-51852 | |
| CVE-2026-51859 | CVE-2026-51859 | |
| CVE-2026-51853 | CVE-2026-51853 | |
| CVE-2026-51857 | CVE-2026-51857 | |
| CVE-2026-51871 | CVE-2026-51871 | |
| CVE-2026-51860 | CVE-2026-51860 | |
| CVE-2026-51872 | CVE-2026-51872 | |
| CVE-2026-51867 | CVE-2026-51867 | |
| CVE-2026-51861 | CVE-2026-51861 | |
| CVE-2026-51870 | CVE-2026-51870 |
No comments yet