EUVD-2026-67268
GHSA-cfvm-24fr-q9xj
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Arbitrary SQL execution enables full database read and write, warranting C:H/I:H; PR:N retained as sql_query is reachable without credentials per description.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.
AnalysisAI
SQL injection in the NL2SQLTool component of crewai-tools v1.10.2rc1 exposes any application built on this AI agent framework to arbitrary database query execution by remote unauthenticated attackers. The unsanitized sql_query argument is passed directly to the underlying database engine, enabling classic injection attacks against the connected data store. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target application must be using the crewai-tools NL2SQLTool component version 1.10.2rc1 and must expose an interface - directly or via an AI agent - through which untrusted external input influences the sql_query argument passed to the tool. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) scores 6.5, but the impact metrics C:L/I:L understate the realistic blast radius of arbitrary SQL execution - full database read and write typically warrant C:H/I:H. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No specific patched version has been confirmed from the available data; the references do not link to a GitHub release, changelog, or security advisory identifying a fixed version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today