crewai-tools@1.14.7.dev20260617

crewai-tools is a Set of tools for the crewAI framework

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the URL fetch logic in the scraping loaders and website scraping tools, including DocsSiteLoader, DOCXLoader, PDFLoader, load_from_url, WebPageLoader, ScrapeElementFromWebsiteTool, and ScrapeWebsiteTool. An attacker can access internal services or cloud metadata endpoints by supplying a URL that passes the initial check and then redirects to a private address, or by using DNS rebinding to make the fetch target resolve to an internal host after validation. The vulnerable code validates the starting URL once and then fetches it with requests.get, so redirect targets are not re-checked before the request is followed. From the user’s perspective, this lets a malicious URL fetch trigger requests from the CrewAI server to protected network locations and expose internal data.

Notes

• DocsSiteLoader, DOCXLoader, PDFLoader, and load_from_url all fetch arbitrary URLs with the same unauthenticated HTTP client path, so the bypass is not limited to a single loader class; any code path that uses those helpers inherits the redirect/DNS-rebinding issue.
• ScrapeWebsiteTool and ScrapeElementFromWebsiteTool accept a user-supplied website_url and pass through caller-provided headers/cookies, so deployments that attach session or API credentials to scraping requests can also leak those credentials if a redirect crosses to an attacker-controlled origin.

Upgrade crewai-tools to version 1.15.1a1 or higher.