Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-92206— CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

Quick assessment

Affected
CrewAI CrewAI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CrewAI 框架存在代理加载不安全反射导致的远程代码执行漏洞。该漏洞允许远程攻击者在受影响的 CrewAI 安装中执行任意代码。利用此漏洞需要用户交互，即目标系统必须从仓库中加载恶意的代理配置文件。 具体缺陷存在于 函数中：该过程未对用户提供的参数进行充分限制，便直接将其用于模块导入。攻击者可利用此漏洞，在服务账户的上下文中执行恶意代码。此漏洞编号为 ZDI-CAN-28387。

AI Predicted 9.8 Difficulty: Easy

Affected Version Matrix 1

VendorProduct Version RangeStatus
CrewAI CrewAI Latest (as of 2025-10-09) affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-92206

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The specific flaw exists within the load_agent_from_repository function. The process does not properly restrict a user-supplied argument before using it to import a module. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28387.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用外部可控制的输入来选择类或代码(不安全的反射)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
CrewAI CrewAI Latest (as of 2025-10-09) -

II. Public POCs for CVE-2026-92206

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-92206

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-92206 (1)

IV. Related Vulnerabilities

Same product: CrewAI
Same vendor: CrewAI
Same weakness: CWE-470

V. Comments for CVE-2026-92206

No comments yet

Leave a comment