CVE-2026-2286 in CrewAI
요약 (영어)
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
책임이 있는
certcc
예약하다
2026. 02. 10.
공개
2026. 03. 30.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354214 | CrewAI RAG Search Tool 권한 상승 | 918 | 정의되지 않음 | 정의되지 않음 | CVE-2026-2286 |