7.4Yüksek
CVE-2026-112308crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool
Açıklama
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.
Zayıflık türü (CWE):
CWE-918
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| crewai | crewai | ≤ 1.15.28 | |
| crewAIInc | crewai-tools | ≤ 1.15.28 |
Kaynaklar ve yamalar
- https://github.com/crewAIInc/crewAI/pull/6870 patchissue-tracking
- https://github.com/crewAIInc/crewAI/blob/1.15.28/lib/crewai-tools/src/crewai_tools/tools/selenium_scraping_to… technical-description
- VulnCheck Advisory: crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool third-party-advisory