CVE-2026-2287 in CrewAI
Résumé (Anglaise)
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Responsable
certcc
Réserver
10/02/2026
Divulgation
30/03/2026
Entrées
| ID | Vulnérabilité | CWE | Base | Temp | 0day | Aujourd'hui | Exp | KEV | EPSS | CTI | Con | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354217 | CrewAI Docker élévation de privilèges | 749 | 6.3 | 6.3 | $0-$5k | $0-$5k | Non défini | 0.00000 | 1.42+ | Non défini | CVE-2026-2287 |