product · May 22, 2026

CrewAI Releases Security Patch for Four Critical Vulnerabilities Including CVE-2026-2275

CrewAI released a security patch addressing four high-impact vulnerabilities in its multi-agent orchestration platform on or around May 20, 2026. The update covers CVE-2026-2275 (CVSS 9.6, Critical, with public PoC), CVE-2026-2286 and CVE-2026-2287 (both CVSS 9.8, Critical), and CVE-2026-2285 (CVSS 7.5, High). The flaws stem from the Code Interpreter tool falling back to SandboxPython when Docker is unavailable, improper URL validation in RAG tools enabling SSRF, failure to verify Docker runtime leading to RCE, and lack of path validation in the JSON loader tool allowing arbitrary local file reads. CrewAI maintainers implemented fixes such as module blocking, fail-closed configurations, runtime warnings, and updated documentation; users must apply the patch to prevent prompt injection chaining to sandbox escape and code execution on the host. Action1 highlighted the need to patch all endpoints quickly given the proof-of-concept for CVE-2026-2275.