CVE-2026-2286 in CrewAI
摘要 (英语)
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
负责
certcc
预定
2026-02-10
披露
2026-03-30
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354214 | CrewAI RAG Search Tool 权限提升 | 918 | 未定义 | 未定义 | CVE-2026-2286 |