CVE-2026-92206
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
- Risk score
- 66/100
- CVSS
- 8.8 v3.0
- Exploit chance (30 days)
- 0.5%
- Published
- 21 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A remote code execution vulnerability exists in the CrewAI Framework Agent Loading Unsafe Reflection, allowing attackers to execute arbitrary code with the service account context, requiring user interaction to load a malicious agent configuration.
- Affected
- {'products': ['CrewAI Framework Agent'], 'packages': [], 'versions': []}
- Fix
- Check the linked advisory for the concrete fix, as none is provided.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Remotely exploitable without logging in
References
Original description
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The specific flaw exists within the load_agent_from_repository function. The process does not properly restrict a user-supplied argument before using it to import a module. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28387.
Last activity 21 Oct 2026. Patch Forecast updates every hour.