ZeroDay Findings
Sign inSign up

Findings

CVE-2026-2287

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

Published Mar 30, 2026 · updated Jun 17, 2026 · crewai crewai

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 30, 2026 · NIST NVD

    Detected

    CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

  2. Jun 17, 2026 · NIST NVD

    Updated

    CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

Affected

  • cpe crewai/crewai1.0.0

Sources

  • CVE.orgVulnerability recordCVE-2026-2287

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-2287

    CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.

    nvd.nist.gov

References