Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
crewaiinc/crewai
main @ 5827abb
31
Fixes
3
CVEs
CRITICAL
Peak severity
38.1%
Coverage
Highlights
Path Traversal: 12 prior fixes. Scrutinize any change in this area.
dependencies: most-fixed (4 issues). Treat as high-risk during review.
20 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Insecure restricted Python execution environments allowed attackers to break out of the local interpreter. Mitigated by mandating Docker environments and removing the insecure fallback interpreter entirely.
Path Traversal: Unvalidated paths inside JSON project and tool definitions allowed attackers to load and execute arbitrary Python modules from outside the project directory.
Server-Side Request Forgery: Lack of strict URL validation in tools like the RAG search tool allowed SSRF attacks against local and cloud metadata services. Addressed via DNS resolution pinning and IP-address checks.