CVE-2026-37009
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
SQL injection vulnerability in the NL2SQLTool component of crewai-tools v1.10.2rc1. A remote attacker can execute arbitrary SQL commands via an unsanitized sql_query argument.
Risk Assessment
An attacker can gain unauthorized access to the database, steal or modify data, and in extreme cases take over the system.
Recommendation
Update crewai-tools to the latest patched version. Additionally, validate and sanitize all input arguments passed to NL2SQLTool.
Other vulnerabilities in crewai-tools
See all- CVE-2026-37007Critical
Vulnerability in the FileWriterTool component of crewai-tools <= 1.10.2rc1. A remote attacker can achieve code execution via malicious path traversal sequences in the filename argument.
- CVE-2026-112308High
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct headless Chrome to loopback, RFC1918, or cloud metadata addresses to disclose internal data and cloud credentials.
Original NVD description (English source)
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS