CVE-2026-2286 in CrewAI
Résumé (Anglaise)
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
Responsable
certcc
Réserver
10/02/2026
Divulgation
30/03/2026
Entrées
| ID | Vulnérabilité | CWE | Base | Temp | 0day | Aujourd'hui | Exp | KEV | EPSS | CTI | Con | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354214 | CrewAI RAG Search Tool élévation de privilèges | 918 | 6.3 | 6.3 | $0-$5k | $0-$5k | Non défini | 0.00000 | 1.26+ | Non défini | CVE-2026-2286 |