CVE-2026-2285
CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.
Vendor
Product
CWE
Yayın Tarihi
2026-03-30 16:16:04
Güncelleme
2026-04-06 15:46:14
Source Identifier
cret@cert.org
KEV Date Added
-