CVE-2026-37009

A SQL injection vulnerability exists in NL2SQLTool within crewai-tools v1.10.2rc1 . A remote attacker can execute arbitrary SQL commands by supplying an unsanitized sql_query argument to the tool. No specific remediation or patched version is provided in the available documents, and no exploitati...