Skip to content
OpenAdvisories

Vendor

CrewAI

7 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • High 8.8

    CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

    CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerab…

  • High 8.1

    CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different v…

  • High 7.5

    CVE-2026-2285

    CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.