Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-2285

CVE-2026-2285

Description

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CrewAI CrewAI

  • 1.0affected

References