CrewAI SSRF guard bypass lets attackers steer internal requests
An AI tool may be tricked into opening attacker-given addresses inside your network!
Summary
CrewAI's SSRF guard and HTTP client both miss malicious content in URLs. Anyone who uses a request path that accepts a URL, such as ScrapWebsiteTool, can let an attacker make the server send internal requests.
Affected when
- Use of features that request URLs (e.g., ScrapWebsiteTool)
- CVE record lists versions below 1.15.17
What to do
The CVE record lists versions below 1.15.17 as affected. Check that the installed version is newer than 1.15.17 and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen