SSRF Vulnerability in CrewAI Due to Inadequate URL Validation

Executive Summary

CVE-2026-120630 is an SSRF vulnerability in CrewAI caused by inconsistent URL parsing between its SSRF guard and HTTP client. The vulnerability allows malicious URLs to bypass security checks, enabling Server-Side Request Forgery attacks. Specifically, the ScrapeWebsiteTool lacks proper input validation for URLs, which could lead to unauthorized internal network access or other security breaches.

The issue arises because different URL parsers interpret malformed URLs differently. For example, a URL like http://127.0.0.1:8080\@1.1.1.1/ may be parsed as connecting to 127.0.0.1 by the HTTP client but interpreted as 1.1.1.1 by the guard, allowing access to restricted resources.

Useful 0 Not Useful 0

Detection Guidance

To detect this SSRF vulnerability in CrewAI, monitor network traffic for unusual requests to internal IPs or private ranges. Check logs for URLs containing backslashes in the authority section, such as http://127.0.0.1:8080\@1.1.1.1/. Use tools like tcpdump or Wireshark to inspect HTTP requests for discrepancies between parsed and actual destinations.

Inspect CrewAI logs for ScrapeWebsiteTool usage with unexpected URLs. Test inputs with malformed URLs to see if internal resources are accessed. Enable verbose logging in CrewAI to capture detailed request and parsing behavior.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to access internal network resources, such as databases, admin panels, or cloud metadata endpoints, by tricking the application into making unauthorized requests. It may also lead to remote code execution or data exfiltration if combined with other vulnerabilities.

For users of CrewAI, the ScrapeWebsiteTool could be manipulated to send requests to unintended internal systems, potentially compromising sensitive data or system integrity. Attackers might exploit this to pivot within a network or escalate privileges.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating regulations like GDPR (data protection) and HIPAA (healthcare data privacy). Non-compliance may result in legal penalties, reputational damage, and loss of customer trust due to data breaches or unauthorized data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update CrewAI to the latest patched version to apply SSRF protections. Block backslashes in URLs at the network or application level to prevent parser confusion. Use the CREWAI_TOOLS_FORCE_SAFE_PATHS environment variable to enforce safe URL paths.

Implement strict input validation for all URLs, ensuring they resolve to expected public IPs. Validate DNS and peer IPs at each redirect hop. Consider using the SSRFProtectedAdapter for all HTTP requests to enforce IP-based restrictions.

Useful 0 Not Useful 0