CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.
Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter
CVE-2026-2287