Skip to content
OpenAdvisories

Vendor

crewAIInc

2 known vulnerabilities.

Products

crewai-tools 1 crewAI 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-112308

    crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool

    crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input…

    crewAIInc crewai-tools
  • High 7.4
    CVE-2026-62240

    CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

    CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplyin…

    crewAIInc crewAI crewai-tools PyPI