by Kastro
Paper/Archive/CVE-2026-120630

CVE-2026-120630

CrewAI CrewAI — CVE-2026-120630

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
32
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 21.8.218 × 204.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.

Affected

ProductAffectedFixed inSource
CrewAI< 1.15.171.15.17CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdocs.crewai.com/v1.15.16/en/tools/web-scraping/scrapewebsitetoolrefbadcast.dev/blog/parser-differential-ssrf-ai-agentsrefgithub.com/crewAIInc/crewAI/pull/6981