7.5 High
CVE-2026-2285
CrewAI vulnerability
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.6%probability of exploitation in the next 30 days
Higher than 48% of scored CVEs
SeverityCVSS
7.5High
Description NVD
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
Coverage 1 article · 1 outlet
- CrewAI Vulnerabilities Expose Devices to HackingSecurityWeek · first in our coverage · mentions it in passing