CVE-2026-2286

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime...

CVE-2026-2286

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime...

CVE-2026-2286

The CrewAI framework is vulnerable to a server-side request forgery (SSRF) vulnerability. The root cause is that RAG search tools fail to properly validate URLs provided at runtime, which allows an attacker to acquire content from internal and cloud services. This could lead to unauthorized acces...

CVE-2026-2286: Server-Side Request Forgery (SSRF)

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime...