10 matches found
Directory Traversal
Overview crewai-tools is a Set of tools for the crewAI framework Affected versions of this package are vulnerable to Directory Traversal via the FileWriterTool process. An attacker can execute arbitrary code by supplying specially crafted path traversal sequences in the filename parameter. Detail...
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
PT-2026-82664
Name of the Vulnerable Software and Affected Versions crewai-tools versions prior to 1.10.3 Description A flaw in the FileWriterTool allows a remote attacker to execute arbitrary code. This is achieved by using malicious path traversal sequences—a technique used to access files and directories...
CVE-2026-37007
A vulnerability exists in the FileWriterTool component of crewai-tools (versions
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
CVE-2026-37007: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...
