9.8 Critical
CVE-2026-2287
CrewAI vulnerability
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.7%probability of exploitation in the next 30 days
Higher than 54% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Coverage 1 article · 1 outlet
- CrewAI Vulnerabilities Expose Devices to HackingSecurityWeek · first in our coverage · mentions it in passing