CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
References
History

Mon, 30 Mar 2026 16:15:00 +0000

Type Values Removed Values Added
Description CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Title CVE-2026-2287
References

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2026-03-30T15:50:54.907Z

Updated: 2026-03-30T15:50:54.907Z

Reserved: 2026-02-10T14:42:11.332Z

Link: CVE-2026-2287

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-30T16:16:04.877

Modified: 2026-03-30T16:16:04.877

Link: CVE-2026-2287

cve-icon Redhat

No data.