CVE-2026-37007
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.
- Published Aug 27, 2026
- CVSS 9.8 critical
- 1.0% chance of exploitation in the next 30 days (EPSS)
- A fix is available