CVE-2026-62240 CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools
Attackers can bypass SSRF filters in CrewAI to access internal services and cloud metadata via HTTP redirects or DNS rebinding.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-62240?
CVE-2026-62240 is a high-severity server-side request forgery vulnerability in crewAIInc crewAI, published on 13 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal addresses or use DNS rebinding techniques to access internal services and cloud metadata endpoints.
Weakness: CWE-918
Which versions are affected by CVE-2026-62240?
3 open source packages ship an affected version, including crewai-tools. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
crewai-tools PyPI | All versions | 1.15.1 |
crewai-tools PyPI | All versions | 1.15.1 |
crewai-tools PyPI | All versions | 1.15.1 |
Products include Crewai Crewai.
How do I fix CVE-2026-62240?
Upgrade crewai-tools to 1.15.1 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-62240 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-62240 exists.
Other vulnerabilities in crewAIInc crewAI
Sources
Also known as GHSA-mr4r-hcgx-8p4h, PYSEC-2026-3819.