agent-receipt-validator-mcp (0.1.1), agentchaos-sdk (0.1.0) +19 more potentially affected by CVE-2026-2286 via crewai (>=1.0.0a1, <=1.14.0a4)

crewai PYPI version =1.0.0a1, =0.0.6, =1.2.0rc5, =0.0.1, =0.4.8, =0.1.0, =1.0.0a1, =0.1.0, =0.1.5, =0.2.3 and more Source cves: CVE-2026-2286 Source advisory: SNYK:PYTHON-CREWAI-15922659...

agentchaos-sdk (0.1.0), agentic-control-crews (0.2.0) +8 more potentially affected by CVE-2026-2286 via crewai-tools (>=1.6.1, <=1.11.0)

crewai-tools PYPI version =1.6.1, =0.0.6, =0.1.0, =0.1.0, =0.1.5, =0.2.3 Source cves: CVE-2026-2286 Source advisory: SNYK:PYTHON-CREWAITOOLS-15922658...

Exposed Dangerous Method or Function

Overview crewai-tools is a Set of tools for the crewAI framework Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the CodeInterpreter tool that fallbacks to SandboxPython when Docker is unreachable. An attacker can execute arbitrary code by invoking...

agentchaos-sdk (0.1.0), agentic-control-crews (0.2.0) +8 more potentially affected by CVE-2026-2275 via crewai-tools (>=1.6.1, <=1.11.0)

crewai-tools PYPI version =1.6.1, =0.0.6, =0.1.0, =0.1.0, =0.1.5, =0.2.3 Source cves: CVE-2026-2275 Source advisory: SNYK:PYTHON-CREWAITOOLS-15922544...

agentchaos-sdk (0.1.0), agentic-control-crews (0.2.0) +8 more potentially affected by CVE-2026-2287 via crewai-tools (>=1.6.1, <=1.11.0)

crewai-tools PYPI version =1.6.1, =0.0.6, =0.1.0, =0.1.0, =0.1.5, =0.2.3 Source cves: CVE-2026-2287 Source advisory: SNYK:PYTHON-CREWAITOOLS-15922651...

adaptiq (0.12.9), agentchaos-sdk (0.1.0) +31 more potentially affected by CVE-2026-2285 via crewai-tools (>=0.13.2, <=1.11.0)

crewai-tools PYPI version =0.13.2, =0.1.0, =0.0.6, =0.1.7, =0.2.6, =0.1.0, =0.5.42, =0.1.0, =0.74.0, =0.86.0 - crewai-geolocate 0.1.0 - crewai-ldn 0.1.0 and more Source cves: CVE-2026-2285 Source advisory: SNYK:PYTHON-CREWAITOOLS-15922426...

CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

CVE-2026-2285 CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

CVE-2026-2285

The CrewAI framework is vulnerable to an arbitrary local file read vulnerability within its JSON loader tool . The root cause is a lack of path validation , which allows an attacker to access sensitive files on the server. Exploitation can be chained with other vulnerabilities (like RCE or SSRF) ...

CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

CVE-2026-2285 CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

CVE-2026-2285

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server...

CVE-2026-2286

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime...

CVE-2026-2287 CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

CVE-2026-2287

The CrewAI framework contains a vulnerability where it fails to verify if Docker remains active during runtime. If Docker is unavailable, the system silently falls back to a SandboxPython environment, which provides insufficient isolation and allows for Remote Code Execution (RCE) . An attacker c...

CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

CVE-2026-2287 CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

CVE-2026-2287 CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...