EUVD-2026-67269
GHSA-v667-mxv8-67r8
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reachable via network-fed agent input but requires FileWriterTool enabled and attacker-controlled filename (AC:H); primitive is arbitrary write (I:H/A:H) with only indirect confidentiality (C:L) via RCE chaining.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.
AnalysisAI
Arbitrary file write leading to code execution in crewai-tools' FileWriterTool (crewAI agent-tools package) through 1.10.2rc1 lets an attacker supply path-traversal sequences (../), absolute paths, or symlink escapes in the tool's filename argument to write content anywhere the process can reach. Because these tools are driven by LLM agents, the practical trigger is untrusted/injected content steering the agent to write outside its intended directory, overwriting code or config to gain execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the crewAI FileWriterTool to be enabled in the agent setup and for the attacker to control (directly or via prompt injection) the filename argument passed to it; the traversal payload is a '../' sequence, an absolute path, or a path through a symlink in that filename. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The assigned CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) reflects a worst-case network, unauthenticated, full-impact scenario, but the real-world signals are more mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upstream fix available (commit 713fa7d); a released patched version is not independently confirmed from the input, so upgrade crewai-tools to the first tagged release above 1.10.2rc1 that includes commit 713fa7d (verify against the project's release notes before deploying). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all production and development systems running crewai-tools (version 1.10.2rc1 and earlier) and restrict network access to affected instances; disable the FileWriterTool if not critical to business operations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today