Skip to content
Noroxi

CrewAI records

4 published records for vendor crewai.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
25%
Median publish → KEV
No record has entered KEV

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2026-2287
    39Monitor

    CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE expl

    CriticalCVSS 9.8No exploitEPSS 0%

    crewai · crewaiMar 30, 2026

  • CVE-2026-2286
    39Monitor

    CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated b

    CriticalCVSS 9.8No exploitEPSS 0%

    crewai · crewaiMar 30, 2026

  • CVE-2026-62240
    33Monitor

    CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

    HighCVSS 8.3No exploitEPSS 0%

    crewai · crewaiJul 13, 2026

  • CVE-2026-2285
    30Monitor

    CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access

    HighCVSS 7.5No exploitEPSS 0%

    crewai · crewaiMar 30, 2026