CVE-2026-37009

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-37009

The crewai-tools library, specifically version v1.10.2rc1 , contains a SQL injection vulnerability within the NL2SQLTool component. This flaw allows a remote attacker to execute arbitrary SQL commands because the sql_query argument is improperly neutralized and processed without sufficient saniti...

EUVD-2026-67268

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-37009

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-37009: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-37009

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-37009

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

PT-2026-82665

Name of the Vulnerable Software and Affected Versions crewai-tools version 1.10.2rc1 Description A SQL injection issue exists in the NL2SQLTool component. A remote attacker can execute arbitrary SQL commands by providing an unsanitized sql query argument. SQL injection is a technique where...