CVE-2026-2286 in CrewAI
Сводка (Английский)
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
Ответственный
certcc
Резервировать
10.02.2026
Раскрытие
30.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354214 | CrewAI RAG Search Tool эскалация привилегий | 918 | Не определено | Не определено | CVE-2026-2286 |