CVE-2026-120630 | CrewAI up to 1.15.16 HTTP Client server-side request forgery

November 2, 2026 Yanac

A vulnerability, which was classified as critical, was found in CrewAI up to 1.15.16. The impacted element is an unknown function of the component HTTP Client. The manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-120630. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More