HighVulnerability

CVE-2026-112308: crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows…

Source: NVD(opens in a new tab)
Identifier: CVE-2026-112308
Published: October 19, 2026
Record updated: October 19, 2026

Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.

Summary

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool. The tool never applies the validate_url private-address check, so attackers can make it fetch internal resources. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Details

Scores and exploitation

CVSS score: 7.4(high)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Attack vector: network
Attack complexity: low
Privileges required: none
User interaction: required
EPSS: Not scored. FIRST had not published an EPSS score for this CVE when it was last checked on October 19, 2026.
Disclosure date: October 19, 2026

Weaknesses and techniques

Weakness (CWE): CWE-918
Attack pattern (CAPEC): CAPEC-664
AI threat technique (MITRE ATLAS): AML.T0010
AML.T0051

Classification

Attack type: Prompt injection,
Supply chain
Attack sophistication: Moderate
AI component targeted: Agent
Impact: Confidentiality
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-112308

First tracked: October 19, 2026 at 02:07 PM ET, from NVD/CVE Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 93% (self-assessed)

Summary

Mitigation

Related items