EUVD-2026-115354
GHSA-x35j-64g3-fxg7
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisCVE.org
CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Crewai gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Lifecycle Timeline
2Threat Intelligence Overview
CVE.org
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Server-side request forgery in CrewAI's scraping tools before version 1.15.1 lets remote attackers reach internal servic
Sandbox escape in CrewAI's CodeInterpreterTool allows untrusted Python code to break out of the in-process restricted ex
CrewAI fails to validate Docker runtime availability during execution and silently reverts to an insecure sandbox mode,
Server-side request forgery in CrewAI's RAG search tools allows remote attackers to access internal and cloud services b
Unsafe reflection in CrewAI's load_agent_from_repository function enables unauthenticated remote code execution when a v
CrewAI's JSON loader tool fails to validate file paths before reading, allowing arbitrary local file access that exposes
Exploit-DB