CVE-2026-120630: SSRF

Published Nov 2, 2026

Updated

CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.

Event History

Nov 2, 2026

CVE Published

via MITRE·05:37 PM

Data Sourced

via MITRE·05:37 PM

DescriptionWeakness

Data Sourced

via OSV·05:37 PM

Description

Data Sourced

via NVD·06:18 PM

Description

Frequently Asked Questions

Which deployments should be prioritized for review?

Prioritize CrewAI deployments that allow untrusted users or content to influence URLs used in outbound requests, including use of the ScrapWebsiteTool.

What capability does an attacker need to exploit this issue?

The attacker needs a way to inject a malicious URL into a request processed by the affected URL handling path. The issue arises because the SSRF guard and HTTP client evaluate different URL content.

CVE-2026-120630: SSRF

Event History

Frequently Asked Questions

Which deployments should be prioritized for review?

What capability does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for review?

What capability does an attacker need to exploit this issue?