Security Advisory

CVE-2026-37009

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-27 00:00:00

Last updated 2026-08-31 17:37:45

Assigner mitre

CVSS score 6.5

State PUBLISHED

Description

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.

← Browse all CVEs View on cve.org ↗