CrewAI fixes four vulnerabilities including RCE and SSRF

CERT/CC disclosed that CrewAI has four vulnerabilities, including remote code execution, arbitrary local file reading, and server-side request forgery, numbered CVE-2026-2275, CVE-2026-2285, CVE-2026-2286, and CVE-2026-2287. Among them, CVE-2026-2275 stems from the Code Interpreter Tool falling back to SandboxPython when it cannot connect to Docker, enabling code execution through arbitrary C function calls; CVE-2026-2287 is the runtime not checking whether Docker is still running and falling back to a sandbox that allows RCE; CVE-2026-2286 is the RAG search tool not validating the runtime URL, leading to SSRF; CVE-2026-2285 is the JSON loader tool not performing path validation, leading to arbitrary file reading.