CVE-2026-2285 in CrewAI
Résumé (Anglaise)
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
Responsable
certcc
Réserver
10/02/2026
Divulgation
30/03/2026
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354220 | CrewAI JSON Loader Tool divulgation d'information | 200 | Non défini | Non défini | CVE-2026-2285 |