Technology & Software Engineering Top 100 / #28ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol

Multi-agent framework · MIT · GitHub; CrewAI Enterprise

CrewAI

Popular role-based multi-agent framework with active commercial backing. Publisher: CrewAI. Also ranked in Supply Chain, Manufacturing & Logistics (#51), Cybersecurity (#56), Sales, Marketing & Customer Experience (#57).

Vendor page ↗+ CompareExport JSON

Trust profileas of 2026-10-26

Publisherlikely · Repository ownership or inferred publisher domain — repository or Hub account ownershiplikely

Complianceno evidence foundT5

Security10 CVEs linked in the registry · 9 critical/high · newest 2026-10-21linked

ProtocolsModel Context Protocol (MCP) probed, not foundAgent2Agent (A2A) probed, not foundAgentic Resource Discovery (ARD) probed, not found0 / 3

TracesNone found — nobody has published what this agent does under attacknone

Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only

Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe CrewAI, not this agent specifically.

Traces — under attack, in defence, in incidents

none public · what a trace is

No public trace found. Nobody has published what CrewAI does when its inputs carry instructions it should not follow, when a tool asks for credentials, or when a task invites a destructive command. Defenders can't learn from what they can't see: run it in a sandbox before the pilot and keep the transcript, or ask the vendor to publish one.

● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.

CVEs — on the official record

10 linked · the registry

CVE-2026-92206

2026-10-21

CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta…

Code execution · unreviewed

High 8.8

CVE-2026-112308

2026-10-19

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applie…

Prompt injection · Credential access · SSRF · unreviewed

High 8.3

CVE-2026-37008

2026-09-13

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of mod…

— · unreviewed

High 8.1

CVE-2026-37007

2026-08-27

A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.

Code execution · Path traversal · unreviewed

Critical 9.8

CVE-2026-37009

2026-08-27

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.

— · unreviewed

Medium 6.5

CVE-2026-62240

2026-07-13

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning…

SSRF · fix known · unreviewed

High 8.3

CVE-2026-2275

2026-03-30

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.

— · unreviewed

Critical 9.6

CVE-2026-2285

2026-03-30

CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.

— · unreviewed

High 7.5

2 more · All 10 in the registry → Severity is the official record's; nothing here enters the score. Links are by listed product, so a CVE that names a different component of the same platform may be missing.

Compliance evidence

4 frameworks shown

–

SOC 2

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 27001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 42001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

CSA STAR

T5 Unknown

Nothing found in the sources checked.

Scope: — · CSA STAR Registry

ask the vendor

"Unknown" means nothing was found in the sources checked — registries, marketplaces and the vendor's own pages. It is not a finding of non-compliance; ask the vendor.

✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier

GDPR, assembled from checks

GDPR● 0 found in registries or documents○ 0 vendor-claimed⚠ 0 issues linkedas of 2026-10-26

– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.

☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.

News and chatter

last 90 days · linked with confidence ≥ 0.85

2026-10-24

crewAI release 1.15.30

GitHub releases · ## What's Changed ### Bug Fixes - Fix AGENTS.md to start the login process while evaluating and stop after three rounds. ### Documentation - Update snapshot and changelog for v1.15.29. ## Contributors @joaomdmoura

Product update

2026-10-23

crewAI release 1.15.29

GitHub releases · ## What's Changed ### Features - Add support for LiteLLM-compatible kwargs. - Implement platform application search in CLI. - Highlight action picker search in CLI. - Trace conversation routes and public replies in flow. - Select organizat

Product update

Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.

Technology & Software Engineering score

technology profile · sar-score-2.0 · #28 of 100 in the curated list

Adoption / usage28 / 30

Trust & security16 / 25

Project / product health20 / 20

Ecosystem / interoperability14 / 15

Domain expertise / fit72 / 100

Governance / compliance evidenceunknown

Docs / transparency10 / 10

Raw component / maximum, then weighted by the technology profile (adoption 30, trust 20, project 20, ecosystem 15, domain 10, governance 0, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.

Before you deploy

Derived from the evidence ledger. This agent is not yet in the reference set, so deployment questions (credentials, approval, data handling) are not answered here — ask the vendor.

Evidence supporting this use (0)

Nothing found in the sources checked.

Unknowns to check (3)

Your lawful basis and DPIA for PHI and personal data the agent will touch

Ask the vendor for SOC 2, ISO 27001, ISO 42001, CSA STAR evidence; none was found in the sources checked

Whether the agent exposes MCP or A2A endpoints; none were observed

Suggested restrictions for a pilot (2)

Ask for the SOC 2 report under NDA before the pilot touches customer data; none was found in the sources checked.

No public trace of this agent under adversarial input was found. Run it in a sandbox against your own prompt-injection and tool-abuse scenarios before the pilot, and keep the transcript; the enterprise edition records one.

Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.

Provenance

seed workbookscores, rank, category

GitHubrepository signals, license

Hacker News, GDELT, vendor feedsnews and chatter

First seen2026-10-26

Recordres_4d0d52f8a5956cf7

Open the full record (JSON) →