CVE-2026-2285

CVE-2026-2285 PUBLISHED

Description (CNA)

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.

Affected (CNA)

Vendor / product	Versions
CrewAI / CrewAI	affected 1.0

CWE

No CWE identifiers supplied.

References

https://www.kb.cert.org/vuls/id/221883

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.