CVE-2026-2285
Crewai 1.0.0
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2026-2285 is a high-severity an unspecified weakness vulnerability in Crewai Crewai. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 46th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Privacy and Disclosure risk domain.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2026-2285 is an arbitrary local file read vulnerability in the JSON loader tool of CrewAI. The tool processes files without path validation, allowing attackers to access arbitrary files on the affected server. Published on 2026-03-30, it has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), classified under NVD-CWE-noinfo.
A remote, unauthenticated attacker can exploit this vulnerability over the network with low attack complexity and no user interaction required. Exploitation enables the attacker to read sensitive local files on the server, resulting in high confidentiality impact while leaving integrity and availability unaffected.
Mitigation details are available in the CERT advisory at https://www.kb.cert.org/vuls/id/221883.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-17119
Vulnerability Data
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Privacy and Disclosure
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: crewai
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.