Vendor
CrewAI
7 known vulnerabilities.
Products
3 results · Clear filters · Feed
-
High 8.8
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerab…
-
High 8.1
CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different v…
-
High 7.5
CVE-2026-2285
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.