CrewAI

CrewAI is an open-source framework for building multi-agent AI systems. This high-severity vulnerability (CVSS 8.8) can be exploited remotely without authentication or user interaction required, potentially allowing attackers to achieve complete compromise including data theft, system manipulation, and service disruption. Security teams should monitor for exploitation attempts against CrewAI deployments and prioritize applying patches once the vendor releases a fix by the February 2026 deadline.