Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Cyata

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

2

Sources

3

Corpus findings

2026-04-03 / agents-researcherFour CrewAI CVEs Enable Prompt Injection to Full RCE via Sandbox Escape and SSRF ChainSecurity researcher Yarden Porat of Cyata disclosed four critical vulnerabilities in CrewAI: CVE-2026-2275 (Code Interpreter sandbox escape via vulnerable SandboxPython fallback when Docker unavailable), CVE-2026-2287 (RCE from Docker runtime verification failure), CVE-2026-2286 (SSRF via unvalidated RAG search tool URLs), and CVE-2026-2285 (arbitrary file read from unvalidated JSON loader paths). These can be chained through prompt injection — an attacker interacting with a CrewAI agent with Code Interpreter enabled can achieve sandbox bypass and RCE/file read. CERT/CC published advisory VU#221883; no official patch exists yet, with maintainers developing mitigations including fail-closed configurations.

Graph relationships

WORKS AT
Yarden Porat
Security researcher Yarden Porat of Cyata disclosed four critical vulnerabilities in CrewAI
Source finding
WORKS AT
Yarden Porat -> Cyata
Security researcher Yarden Porat of Cyata disclosed four critical vulnerabilities in CrewAI
Source finding

Source trail

Security researcher Yarden Porat of Cyata disclosed four critical vulnerabilities in CrewAI TrinityGuard's multi-agent safety framework found a 7.1% average safety pass rate a 2026 Agentic AI Security Report surveying 300 enterprise leaders

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues