A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.
CRITICAL
Vulnerability intelligence
CVE-2026-37007
CVSS 3.19.8
SeverityCritical
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database