AI AgentHigh
CVE-2026-112308: crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapin…
- Occurred
- Oct 19, 2026
- Published
- Oct 19, 2026
- Source
- NVD CVE
Summary
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.
Tags
- CVE
- CVE-2026-112308
- cvss:HIGH
- agent-fail:injection-indirect
- agent-fail:tool-selection
- agent-cause:missing-guardrail
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Vulnerability in agent tool allows SSRF via prompt injection to access internal resources and credentials.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8