CrewAI vulnerabilities
We track 4 vulnerabilities in CrewAI products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest CrewAI vulnerabilities
- 9.1 Critical severity
CrewAI: Server-Side Request Forgery
CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsit
- 8.8 High severity
CrewAI: Use of Externally-Controlled Input to Select Classes or Code
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerabi
- 8.1 High severity
CrewAI: Improper Protection of Alternate Path
CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. Fo
- 9.8 Critical severity
CrewAI: Server-Side Request Forgery
CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not properly validating URLs provided at runtime.