TerminalToolkit.shell_exec in camel-ai camel versions 0.2.91a1 through 0.2.91a3 permits the execution of arbitrary shell commands when a user is presented with a prompt, but the code does not enforce any approval or validation boundary. This flaw is a classic example of code injection (CWE-94), which could compromise the confidentiality, integrity, or availability of the system where the vulnerable component runs by allowing an attacker to execute arbitrary OS commands.

The issue affects the camel-ai camel library in versions 0.2.91a1, 0.2.91a2, and 0.2.91a3. No other versions were listed as affected by the CVE entry. The specific vendor product name is camel-ai camel.

The CVSS score of 9.8 indicates a critical severity, and the EPSS of < 1% suggests that while widespread exploitation is unlikely, the vulnerability should still be addressed promptly. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local or remote prompt that initiates TerminalToolkit.shell_exec; the lack of an approval boundary means the attacker can inject any shell command. With administrative or sufficient user privileges, exploitation could lead to full system compromise.