CVE-2026-51857Published
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-51857 · Microsoft / collected KEV context
cve-program · CVE-2026-51857
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.