critical9.8
CVE-2026-2287
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Impact
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crewai | Crewai | Version 1.0.0 |