Issues

• 邀请 camel 加入 GithubStarMate，让更多人发现你的作品

  camel-ai/camel#4388 · Filter by author usmanxg58-byte opened on Oct 2, 2026

• Cookbook proposal: capping an agent run (or Workforce task) in dollars

  camel-ai/camel#4386 · Filter by author domondi1 opened on Oct 2, 2026

• [Feature Request] Workforce: put {content} last in PROCESS_TASK_PROMPT so sibling subtasks can share a cached prefix

  Needs Triage
  camel-ai/camel#4384 · Filter by author fduple opened on Oct 1, 2026

• [BUG] RedisStorage.save() reports success when the write failed, and load() returns [] for an unreachable Redis

  camel-ai/camel#4383 · Filter by author ericdelorefice opened on Sep 30, 2026

• MemCode context for authorized CAMEL agent teams

  camel-ai/camel#4380 · Filter by author vivekgupta-memcode opened on Sep 29, 2026

• Add ScreenContextAgent context source for multi-agent tasks

  camel-ai/camel#4379 · Filter by author ikeikeikeda66 opened on Sep 27, 2026

• [BUG] CriticAgent overwrites ChatAgent's retry_attempts clamp, so retry_attempts=0 answers at random without calling the model

  camel-ai/camel#4378 · Filter by author chrikrah opened on Sep 26, 2026
  1

• [BUG] WeaviateStorage._collection_exists reports a failed schema read as a missing collection

  camel-ai/camel#4377 · Filter by author ericdelorefice opened on Sep 26, 2026

• [BUG] OpenAPIToolkit: security scheme in: cookie never gets its API key injected because the branch tests the misspelled literal 'coolie'

  camel-ai/camel#4371 · Filter by author BlueX888 opened on Sep 24, 2026
  1

• [BUG] AnthropicModel sends max_tokens=None whenever the user config omits it, violating the SDK Required[int] contract, so every default-config call fails

  camel-ai/camel#4370 · Filter by author BlueX888 opened on Sep 24, 2026
  1

• [BUG] Streaming ChatAgent silently drops tool calls whose name is not a registered internal tool (hallucinated names and external_tools)

  camel-ai/camel#4366 · Filter by author BlueX888 opened on Sep 23, 2026
  2

• [BUG] clone() drops the parent's message window: no memory class exposes a public window_size

  camel-ai/camel#4360 · Filter by author ebarkhordar opened on Sep 23, 2026

• [Feature Request] Add AnySearch support

  camel-ai/camel#4359 · Filter by author Yougan001 opened on Sep 23, 2026

• [BUG] CAMEL FileToolkit working_directory path traversal allows arbitrary file write and persistent code execution (CWE-22, CVSS 9.8)

  bugNeeds Triage
  camel-ai/camel#4355 · Filter by author ybyu-ieu opened on Sep 21, 2026

• [BUG] CAMEL FileToolkit working-directory path traversal allows arbitrary host file read and modification (CWE-22, CVSS 8.2)

  bugNeeds Triage
  camel-ai/camel#4354 · Filter by author ybyu-ieu opened on Sep 21, 2026

• [BUG] CAMEL FaissStorage unrestricted pickle deserialization of vector-store metadata allows arbitrary code execution (CWE-502, CVSS 9.3)

  bugNeeds Triage
  camel-ai/camel#4353 · Filter by author ybyu-ieu opened on Sep 21, 2026

• [BUG] CAMEL ChatAgentOpenAPIServer performs no object-level authorization: any client can enumerate all agent IDs and read, reset, or delete any agent (CWE-639, CVSS 7.5)

  bugNeeds Triage
  camel-ai/camel#4352 · Filter by author ybyu-ieu opened on Sep 21, 2026

• [BUG] CAMEL creates MCP servers with no authentication, exposing agent history and tool-driven command execution to unauthenticated clients (CWE-306, CVSS 9.8)

  bugNeeds Triage
  camel-ai/camel#4351 · Filter by author ybyu-ieu opened on Sep 21, 2026

• [BUG] CAMEL Runtime API server exposes all registered tool endpoints without authentication, enabling unauthenticated tool invocation and host command execution when a command-execution toolkit is registered (CWE-306, CVSS 8.6)

  bugNeeds Triage
  camel-ai/camel#4350 · Filter by author ybyu-ieu opened on Sep 21, 2026
  1

• [BUG] CAMEL ChatAgentOpenAPIServer serves all agent-management endpoints without authentication, enabling unauthenticated remote code execution when shell tools are registered (CWE-306, CVSS 9.8)

  bugNeeds Triage
  camel-ai/camel#4348 · Filter by author ybyu-ieu opened on Sep 21, 2026
  1

• [BUG] CAMEL TerminalToolkit safe-mode command disallowlist bypass allows unauthenticated arbitrary command execution (CWE-78, CVSS 10.0)

  bugNeeds Triage
  camel-ai/camel#4347 · Filter by author ybyu-ieu opened on Sep 21, 2026

• Should a keyless endpoint be a platform in the model list?

  camel-ai/camel#4345 · Filter by author TheCheetah11 opened on Sep 20, 2026

• [BUG] Retriever results are ranked by string comparison, not numeric similarity

  camel-ai/camel#4341 · Filter by author chrikrah opened on Sep 18, 2026

• [BUG] preprocess_messages reorders multi-round tool history on every backend

  camel-ai/camel#4340 · Filter by author chrikrah opened on Sep 18, 2026
  1

• [BUG] Sync streaming ChatAgent raises an uncaught TimeoutError instead of warning when a streamed tool call exceeds tool_execution_timeout

  camel-ai/camel#4336 · Filter by author BlueX888 opened on Sep 15, 2026