CVE-2026-120630 Details
Description
CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.
A server-side request forgery (SSRF) vulnerability exists in CrewAI due to a flaw in its SSRF guard and HTTP client. The guard improperly validates URLs by checking the opposite content, allowing requests that inject malicious URLs to exploit SSRF. This vulnerability is present in CrewAI's web scraping tool, 'ScrapeWebsiteTool'.
CrewAI has released a patch for this vulnerability. The fix is included in CrewAI version 1.15.17.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 2, 2026CISA-ADP
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.crewai.com/v1.15.16/en/tools/web-scraping/scrapewebsitetool | [email protected] | ProductVendor |
| https://github.com/crewAIInc/crewAI/pull/6981 | [email protected] | Issue TrackingVendor |
| https://www.badcast.dev/blog/parser-differential-ssrf-ai-agents/ | [email protected] | ExploitRemedyTechnical Analysis |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| CrewAI | All versions |
CPE
Remediation
| |
| CrewAI ScrapeWebsiteTool | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | CVE Modified | CISA-ADP |
| Nov 2, 2026 | New CVE Received | [email protected] |