CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.kb.cert.org/vuls/id/221883 |
Configurations
No configuration.
History
30 Mar 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-30 16:16
Updated : 2026-03-30 16:16
NVD link : CVE-2026-2286
Mitre link : CVE-2026-2286
CVE.ORG link : CVE-2026-2286
JSON object : View
Products Affected
No product.
CWE
No CWE.