ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
ZDI discloses unpatched unsafe reflection RCE vulnerability CVE-2026-92206 (CVSS 8.8) in the CrewAI agent framework.
50
CVE-2026-92206
Unsafe reflection RCE in CrewAI agent loading
- CVSS 3.0
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
CrewAI's load_agent_from_repository function passes a user-supplied argument into a module import without proper restriction. A remote attacker can run arbitrary code as the service account if the target loads a malicious agent configuration from the repository. User interaction is required. Affected versions and a fixed release are not stated.
What to do: Apply CrewAI's update for CVE-2026-92206; no fixed version is stated.
| Product | Affected |
|---|---|
| crewAI | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The specific flaw exists within the load_agent_from_repository function. The process does not properly restrict a user-supplied argument before using it to import a module. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28387.
- Weakness
- CWE-470
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H