Read the docs
TI-2026-44463 Aliases CVE-2026-62240GHSA-mr4r-hcgx-8p4h

CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

Priority HIGH 69CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal addresses or use DNS rebinding techniques to access internal services and cloud metadata endpoints.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0052 44th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix Fixed crewAI (crewAIInc): 1.15.1crewai-tools (PyPI): 1.15.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
crewAIInccrewAIbefore 1.15.11.15.1Patch availableCNA
—crewai-tools (PyPI)before 1.15.11.15.1Patch availableGHSA-mr4r-hcgx-8p4h
  • crewAI VendorcrewAIInc Affected before 1.15.1 Fixed in 1.15.1 Patch available CNA
  • crewai-tools (PyPI) Vendor— Affected before 1.15.1 Fixed in 1.15.1 Patch available GHSA-mr4r-hcgx-8p4h

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:crewai:crewai:*:*:*:*:*:*:*:*before 1.15.1VulnerableCrewAI
  • cpe:2.3:a:crewai:crewai:*:*:*:*:*:*:*:* Versions before 1.15.1 Vulnerable ·CrewAI

Remediation

  • Fix · CNA crewAI (crewAIInc) Fixed in 1.15.1
  • Fix · GHSA-mr4r-hcgx-8p4h crewai-tools (PyPI) Fixed in 1.15.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-62240
  2. 2026-10-03 Alias added: GHSA-mr4r-hcgx-8p4h

References

Exploit 2

Patch 2

Advisory 1

Other 1

  • TI-2026-76502 Server-side request forgery in crewai-tools SeleniumScrapingTool CVSS 4.0HIGH 8.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences