Description
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.
Medium · 6.5
CVE-2026-37009
EUVD-2026-67268GHSA-cfvm-24fr-q9xj
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an un…
Published Aug 27, 2026 · Updated Aug 31, 2026 · Assigned by mitre