CVE-2026-2287 — CVE-2026-2287
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Published: 2026-03-30 · CVSS: 9.8 · CVSS 3.1
CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7