crewAIInc

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

crewAIInc records in CISA KEV

No crewAIInc vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76502 CVE-2026-112308 · GHSA-5595-9g9c-5cc4

Server-side request forgery in crewai-tools SeleniumScrapingTool

LOW 36

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.00239 Published 2026-10-19 No fix listed CWE-918

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0