Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-2285
7.5
HIGHCVSS v3
Severity scale
010
Description
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
crewAIInc/crewAI
GitHubFramework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.
GitHubFramework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.= 1.0, = 1.0.0NVD
crewaiPython Package IndexCutting-edge framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.
Python Package IndexCutting-edge framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.= 1.0, = 1.0.0NVD