CrewAI Scrape Tools Patched for SSRF Redirect and DNS Rebinding Bypass
Vulnerability Disclosure · 5 sources · Updated 4mo ago · First seen Jul 13, 2026
CrewAI disclosed and patched CVE-2026-62240, a high-severity server-side request forgery flaw in versions prior to 1.15.1 that affected scrape and URL-fetching features. The bug stemmed from validate_url performing a single hostname resolution and blocklist check before returning the original URL, while downstream requests.get calls could still follow attacker-controlled redirects to internal destinations. Reported impact included access to loopback addresses, RFC1918 space, and cloud metadata endpoints such as 169.254.169.254, creating a path to secret and credential exfiltration.
The fix was shipped in CrewAI 1.15.1 and implemented earlier in a GitHub patch that replaced direct fetches with a new safe_get helper across multiple loaders and website-scraping tools. The updated logic validates every redirect target, limits redirect chains, blocks redirects to internal resources, and strips sensitive headers and cookies on cross-origin redirects; accompanying tests verify that direct internal URLs and redirected internal URLs are denied while safe relative redirects remain allowed. Organizations using affected CrewAI releases are advised to upgrade to 1.15.1 or later and review any application flows that ingest external URLs.
