CVE-2026-2286

CVE-2026-2286 PUBLISHED

Description (CNA)

CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.

Affected (CNA)

Vendor / product	Versions
CrewAI / CrewAI	affected 1.0

CWE

No CWE identifiers supplied.

References

https://www.kb.cert.org/vuls/id/221883

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.