Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-37007

A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.