LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE
Oct 19, 2026 · 16:51 UTC SEARCH
HACKCURRENT Cybersecurity Intelligence Subscribe
MEDIUM
Vulnerability intelligence

CVE-2026-37009

Published September 3, 2026
CVSS 3.16.5
SeverityMedium
Known exploitedNo

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.

NVD references:
Primary source: NIST National Vulnerability Database

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.