CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
| Vendor | Product | Versions |
|---|---|---|
| CrewAI | CrewAI | 1.0 |
Updated description with detailed technical information, changed severity to HIGH, added CVSS estimate of 7.5, included new CWE IDs, and marked the vulnerability as actively exploited with available exploits.
Initial creation
