Loading vulnerability…
SSRF Redirect and DNS-Rebinding Bypass in CrewAI Tools validate_url
CVE-2026-62240 is a server-side request forgery vulnerability affecting CrewAI tools versions earlier than 1.15.1. The validate_url function performs DNS resolution and blocklist validation only once, then returns the original URL for subsequent use. An attacker can cause the eventual request to target a prohibited internal destination by using an HTTP redirect or by changing DNS resolution after validation through DNS rebinding.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation causes the affected CrewAI deployment to issue server-side requests to internal services and cloud metadata endpoints that the URL-validation logic was intended to block. This can expose metadata or other resources reachable from the deployment's network context.
If you can’t patch tonight, do this now.
Until the upgrade is deployed, prevent untrusted users from supplying URLs to functionality that invokes validate_url. Restrict egress from CrewAI deployments and enforce network-layer blocks for private and internal address ranges and cloud metadata services.
Patch, then assume compromise.
Upgrade the crewai-tools package to version 1.15.1 or later. Review application handling of externally supplied URLs and ensure URL validation is applied to the final destination, including after redirects and DNS resolution changes.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.