ZDI 2026-09-16

ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

CVE-2026-92206

Machine-generated analysis · WAYSCloud LLM

Remote attackers can execute code by loading a malicious agent configuration.

Context

The advisory concerns the CrewAI crewAI Framework. It describes an unsafe reflection flaw in the agent loading process that enables remote code execution when a malicious agent configuration is loaded. Exploitation requires the target to load the malicious configuration, indicating user interaction is needed.

Operator considerations

Check: inventory CrewAI framework installations and verify agent configuration sources.
Isolate: restrict loading of external agent configurations until a mitigation is applied.
Log: record attempts to load agent configurations for later analysis.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92206.

Read the full advisory on ZDI →