crewAI vulnerabilities

1 known vulnerability in crewAI from crewAIInc. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  crewAI: Server-Side Request Forgery

  CVE-2026-62240Jul 13, 2026crewAIInc

  CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying