CVE-2026-112308
Received Received - Intake

Server-Side Request Forgery in crewai-tools via SeleniumScrapingTool

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112308
EUVD
EUVD-2026-104400

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
crewAIInc crewai-tools 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

crewai-tools through 1.15.28 has a server-side request forgery (SSRF) vulnerability in the SeleniumScrapingTool component. The tool fails to validate URLs, allowing attackers to bypass private-address checks and fetch internal resources. Attackers can exploit this by using prompt injection to direct headless Chrome to access loopback, RFC1918, or cloud metadata addresses, potentially exposing internal data and cloud credentials.

Impact Analysis

This vulnerability allows attackers to access internal systems, steal sensitive data like cloud credentials, or interact with internal services. If you use crewai-tools in an environment with sensitive data, attackers could exploit this to extract confidential information or gain unauthorized access to internal resources.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for protecting personal and health data. Unauthorized access to internal resources may result in non-compliance, legal penalties, and reputational damage due to exposure of sensitive information.

Mitigation Strategies

Update crewai-tools to the latest version beyond 1.15.28 where the vulnerability is patched. Review and restrict network access for headless Chrome instances to prevent SSRF attacks. Monitor network traffic for unusual requests to internal or cloud metadata addresses.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112308. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart