AploSec / Disclosures / CVE-2026-112308
crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool
CVE-2026-112308 · published 2026-10-19
Summary
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.
Evidence
Reported to the maintainer with a proof of concept that reproduced against the affected release.
Remediation
No fixed release is listed in the advisory. Check the references for upstream status.
References
- VulnCheck advisoryhttps://www.vulncheck.com/advisories/crewai-tools-through-1.15.28-ssrf-via-seleniumscrapingtool
- Fix pull requesthttps://github.com/crewAIInc/crewAI/pull/6870
- Vulnerable codehttps://github.com/crewAIInc/crewAI/blob/1.15.28/lib/crewai-tools/src/crewai_tools/tools/selenium_scraping_tool/selenium_scraping_tool.py
- CVE recordhttps://www.cve.org/CVERecord?id=CVE-2026-112308
- Package
- crewai-tools
- Ecosystem
- PyPI
- Weekly downloads
- 459k
- Affected
- through 1.15.28
- Fixed
- None
- Weakness
- CWE-918
- CNA
- VulnCheck
- Credit
- SashaMIT, Zachariah Mithani