CVE-2026-62240

HighCVSS 7.4

Published: 13/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

44th percentile - higher than 44% of all known CVEs

Summary

CrewAI before version 1.15.1 contains a server-side request forgery (SSRF) vulnerability in the validate_url function, which performs one-shot DNS resolution and blocklist checks but returns the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal addresses or use DNS rebinding techniques to access internal services and cloud metadata endpoints.

Risk Assessment

The risk involves potential access to internal network resources, such as cloud service metadata endpoints or other sensitive systems, which could lead to data leakage or further compromise of the infrastructure.

Recommendation

It is recommended to immediately upgrade CrewAI to version 1.15.1 or later, which includes a fix for the SSRF vulnerability. Additionally, consider implementing extra URL validation mechanisms, such as checking redirects and restricting access to internal IP addresses.

Other vulnerabilities in CrewAI

CVE-2026-37008High
CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. For example, calling ctypes.CDLL(None) loads the C library without relying in any import statements. In other words, a within-process sandbox cannot merely account for the import system and instead must account for the complete runtime of the Python interpreter.

Original NVD description (English source)

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal addresses or use DNS rebinding techniques to access internal services and cloud metadata endpoints.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS