CVE-2026-112308

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-112308

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112308.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-112308

Published

2026-10-19T15:28:57Z

Modified

2026-10-20T02:45:35Z

Severity

8.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator

Summary

crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool

Details

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-918"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112308.json"
}

References

Affected packages

Git / github.com/crewaiinc/crewai

Affected ranges

Type

GIT

Repo

https://github.com/crewaiinc/crewai

Events

Introduced

Last Affected

eb15c66cef12073d8d06d6942eecc35e7fd6c783

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "1.15.28"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*

0.100.0

0.102.0

0.105.0

0.108.0

0.114.0

0.117.0

0.117.1

0.118.0

0.119.0

0.120.0

0.120.1

0.121.0

0.121.1

0.126.0

0.130.0

0.134.0

0.140.0

0.141.0

0.148.0

0.150.0

0.152.0

0.157.0

0.159.0

0.165.0

0.165.1

0.175.0

0.177.0

0.186.0

0.186.1

0.193.0

0.193.1

0.193.2

0.201.0

0.201.1

0.203.0

0.203.1

0.28.7

0.28.8

0.30.11

0.64.0

0.65.2

0.70.1

0.74.0

0.74.2

0.75.0

0.75.1

0.76.0

0.76.2

0.76.9

0.79.0

0.79.4

0.80.0

0.85.0

0.86.0

0.95.0

0.98.0

1.*

1.0.0

1.1.0

1.10.0

1.10.1

1.10.1a1

1.10.2a1

1.10.2rc1

1.10.2rc2

1.11.0

1.11.0rc1

1.11.0rc2

1.11.1

1.12.0

1.12.0a1

1.12.0a2

1.12.0a3

1.12.1

1.12.2

1.13.0

1.13.0a1

1.13.0a2

1.13.0a3

1.13.0a4

1.13.0a5

1.13.0a6

1.13.0a7

1.13.0rc1

1.14.0

1.14.0a2

1.14.0a3

1.14.0a4

1.14.1

1.14.1rc1

1.14.2

1.14.2a1

1.14.2a2

1.14.2a3

1.14.2a4

1.14.2a5

1.14.2rc1

1.14.3

1.14.3a1

1.14.3a2

1.14.3a3

1.14.4

1.14.4a1

1.14.4a2

1.14.5

1.14.5a1

1.14.5a2

1.14.5a3

1.14.5a4

1.14.5a5

1.14.5a6

1.14.5a7

1.14.6

1.14.6a1

1.14.6a2

1.14.7

1.14.7a1

1.14.7a2

1.14.7a3

1.14.7a4

1.14.7rc1

1.14.7rc2

1.14.8a

1.14.8a1

1.14.8a2

1.14.8a3

1.14.8a4

1.14.8a5

1.15.0

1.15.1

1.15.10

1.15.11

1.15.12

1.15.13

1.15.14

1.15.15

1.15.16

1.15.17

1.15.18

1.15.19

1.15.1a1

1.15.2

1.15.20

1.15.21

1.15.22

1.15.23

1.15.24

1.15.25

1.15.26

1.15.27

1.15.28

1.15.2a1

1.15.2a2

1.15.3

1.15.3a1

1.15.3a2

1.15.4

1.15.5

1.15.6

1.15.7

1.15.7a1

1.15.8

1.15.9

1.2.0

1.2.1

1.3.0

1.4.0

1.4.1

1.5.0

1.6.0

1.6.1

1.7.0

1.7.1

1.7.2

1.8.0

1.8.1

1.9.0

1.9.1

1.9.2

1.9.3

v0.*

v0.1.0

v0.1.1

v0.1.14

v0.1.2

v0.1.23

v0.1.32

v0.10.0

v0.11.0

v0.11.1

v0.11.2

v0.119.0

v0.14.0

v0.14.0rc0

v0.14.3

v0.14.4

v0.16.0

v0.16.3

v0.19.0

v0.22.0

v0.22.2

v0.22.4

v0.22.5

v0.27.0

v0.28.0

v0.28.1

v0.28.2

v0.28.5

v0.30.4

v0.30.5

v0.30.8

v0.32.0

v0.32.1

v0.32.2

v0.35.0

v0.35.3

v0.35.4

v0.35.5

v0.35.7

v0.35.8

v0.36.0

v0.41.0

v0.41.1

v0.5.0

v0.5.2

v0.5.3

v0.5.5

v0.51.0

v0.55.2

v0.60.0

v0.61.0

v0.63.0

v0.63.1

v0.63.2

v0.63.5

v0.63.6

v0.83.0

v1.*

v1.10.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112308.json"