Description
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CrewAI | CrewAI | 1.0 | — |
Critical · 9.8
CVE-2026-2287
EUVD-2026-17123
CVE-2026-2287
Published Mar 30, 2026 · Updated Apr 1, 2026 · Assigned by certcc