CVE-2026-92206

Deferred Deferred - Pending Action

Remote Code Execution in CrewAI Framework

Publication date: 2026-10-21

Last updated on: 2026-10-30

Assigner: Zero Day Initiative

Description

CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The specific flaw exists within the load_agent_from_repository function. The process does not properly restrict a user-supplied argument before using it to import a module. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28387.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-09

NVD

CVE-2026-92206

EUVD

EUVD-2026-107404

Affected Vendors & Products

Vendor	Product	Version / Range
CrewAI	CrewAI	Latest (as of 2025-10-09)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-470	The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

Attack-Flow Graph

Executive Summary

This is a remote code execution vulnerability in the CrewAI framework affecting the load_agent_from_repository function. It allows attackers to execute arbitrary code by tricking users into loading a malicious agent configuration from a repository. User interaction is required for exploitation.

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious agent configurations loaded from repositories. Check logs for unusual module imports or code execution attempts in the CrewAI framework. Review network traffic for connections to untrusted repositories.

Impact Analysis

An attacker could exploit this to run malicious code on your system with the privileges of the service account. This could lead to data theft, system compromise, or further network infiltration. The high CVSS score of 8.8 indicates significant risk.

Mitigation Strategies

Immediately restrict user interaction with the CrewAI framework, especially loading agents from external repositories. Disable or isolate affected systems until patches are applied. Monitor for exploitation attempts and review access logs.

Hi! I’m here to help you understand CVE-2026-92206. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...