crewAIInc vulnerabilities
We track 2 vulnerabilities in crewAIInc products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest crewAIInc vulnerabilities
- 7.4 High severity
crewai-tools: Server-Side Request Forgery
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input
- 7.4 High severity
crewAI: Server-Side Request Forgery
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying