Description
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CrewAI | CrewAI | 1.0 | — |