critical9.8
CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the…
Impact
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.
Affected products
| Product | Affected versions |
|---|---|
| Crewai-Tools | through 1.10.2rc1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.