Frequency
2
occurrences
First Seen
March 30, 2026
Last Seen
April 2, 2026
Related Threat Clusters
-
Multiple Vulnerabilities in CrewAI Enable RCE and SSRF Attacks
Four critical vulnerabilities have been discovered in CrewAI, a Python multi-agent framework, including CVE-2026-2275, CVE-2026-2286, CVE-2026-2287, and CVE-2026-2285. These vulnerabilities allow attackers to exploit…
2 articles · Updated April 2, 2026
Recent Intelligence Reports
- 4 unpatched CVEs in CrewAI chain prompt injection → sandbox bypass → RCE on host — Reddit · April 2, 2026
- VU#221883: CrewAI contains multiple vulnerabilities including SSRF, RCE and local file read — Kb.Cert · March 30, 2026