Executive brief
crewAI-Tools is a Python library that provides tools for AI agent workflows, including a FileWriterTool for writing files to disk. A path traversal vulnerability in the FileWriterTool allows attackers to bypass filename restrictions and write files outside the intended directory, enabling arbitrary code execution on the system running the tool.
Technical details
The vulnerability is a path traversal flaw in the FileWriterTool component that fails to properly sanitize filename arguments. An attacker can inject path traversal sequences (e.g., "../") to escape the intended output directory and write files to arbitrary locations on the filesystem. By writing malicious Python code or scripts to executable locations, an attacker can achieve remote code execution. The vulnerability affects crewai-tools versions up to and including 1.10.2rc1. The fix, implemented in commit 713fa7d, adds proper path validation to prevent traversal attacks.
Affected products
- CrewAI crewai-tools up to 1.10.2rc1
Timeline
- 2026-08-27: disclosed
- 2026-08-27: patched: Fix applied in commit 713fa7d