← Database

CVE-2026-37007

CRITICAL CVSS: 9.8 Published: 2026-08-27 Modified: 2026-09-01

Description

A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.

Affected Platforms

Unknown

Weakness Type

CWE-22

References