CyberRota Analysis
AI-GeneratedThe CodeExecutionToolkit in camel-ai versions 0.2.91a1, 0.2.91a2, and 0.2.91a3 is vulnerable to unauthorized execution of model-generated Python code via the SubprocessInterpreter, lacking necessary approval boundaries. This flaw could allow attackers to execute arbitrary code, potentially leading to system compromise. Organizations using these specific versions of camel-ai should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.