CVE-2026-112308: crewai-tools SSRF in SeleniumScrapingTool

A server-side request forgery vulnerability in crewai-tools through version 1.15.28 allows attackers to exploit the SeleniumScrapingTool to fetch internal resources and cloud credentials via prompt injection. The vulnerability exists because the tool fails to apply URL validation checks for private addresses.

Disclosed 19 October 2026 · Record updated 19 October 2026

Impact

Attackers can access internal resources, RFC1918 addresses, loopback addresses, and cloud metadata to disclose internal data and cloud credentials through prompt injection attacks on agents using the vulnerable tool.

Our coverage

A puppet master's invisible strings guide a headless chrome mannequin to peer behind a locked factory door, extracting glowing data cards from the shadows within.

Vulnerabilities

Prompt injection turns crewAI scraping tool into an SSRF gateway

A flaw disclosed on 19 October 2026 lets attackers steer crewai-tools' headless browser at cloud metadata endpoints to pull internal data and credentials.

19 Oct 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-112308