CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.kb.cert.org/vuls/id/221883 |
Configurations
No configuration.
History
30 Mar 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-30 16:16
Updated : 2026-03-30 16:16
NVD link : CVE-2026-2285
Mitre link : CVE-2026-2285
CVE.ORG link : CVE-2026-2285
JSON object : View
Products Affected
No product.
CWE
No CWE.