UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-120630
CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-02T20:58:11.011495+00:00
- Cve id
- CVE-2026-120630
- First seen by Signal
- 2026-11-02T20:53:23+00:00
- Retrieved at
- 2026-11-02T20:58:51+00:00
- Published at
- 2026-11-02T18:18:52.870
- Last modified
- 2026-11-02T18:18:52.990
Explore deeper with Ninja Signal's threat intelligence graph