SSRF Vulnerability in CrewAI Affects Web Scraping Tool

CVE-2026-120630

What is CVE-2026-120630?

CrewAI's web scraping tool is susceptible to Server-Side Request Forgery (SSRF) due to inadequate validation in its SSRF guard and HTTP client. This vulnerability arises when these components incorrectly handle malicious content in URLs. Attackers can exploit this flaw by injecting harmful URLs, leading to unauthorized server requests and potential data leakage. Users of the ScrapWebsiteTool should take immediate action to secure their systems against this exploit.

References