CVE-2026-37007

CVE-2026-37007 is a critical path-traversal vulnerability (CWE-22) in the FileWriterTool component of the crewai-tools package, affecting all versions up to and including 1.10.2rc1. It is triggered when a filename argument supplied to the tool contains malicious path traversal sequences, allowing the attacker to direct file writes outside the intended directory and achieve code execution on the host running the tool. The CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N) reflects exploitation over a network with no privileges or user interaction required. Anyone running crewai-tools at or below version 1.10.2rc1 is potentially affected, with the highest risk in deployments, such as exposed agent services and APIs, where filenames come from untrusted users or model output. There is currently no known public proof of concept, the flaw is not in CISA KEV, and EPSS assigns only about a 0.7 percent probability of exploitation within the next 30 days.

What to do: Upgrade crewai-tools to a version newer than 1.10.2rc1 (no fixed release is specified in the available data, so confirm the patched version in the project's advisory). Until patched, sanitize FileWriterTool filename arguments to reject '..' sequences and path separators, confine writes to a dedicated working directory, and audit whether any exposed agent endpoints pass user- or model-controlled filenames into the tool.