Crewai vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Crewai products: 4 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-2287 Critical · 9.8 CWE-94 Mar 30, 2026

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

CVE-2026-2286 Critical · 9.8 CWE-918 Mar 30, 2026

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.

CVE-2026-2285 High · 7.5 Mar 30, 2026

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.

CVE-2026-2275 Critical · 9.6 CWE-749 Mar 30, 2026

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.