# CVE-2026-37007: crewAI-Tools FileWriterTool path traversal leading to code execution

Source: https://junglewise.ai/threats/cve-2026-37007-crewai-tools-filewritertool-path-traversal-leading-to-code  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-27. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-37007 · Severity: critical · CVSS 9.8 · Published 2026-08-27

crewAI-Tools is a Python library that provides tools for AI agent workflows, including a FileWriterTool for writing files to disk. A path traversal vulnerability in the FileWriterTool allows attackers to bypass filename restrictions and write files outside the intended directory, enabling arbitrary code execution on the system running the tool.

## Quick answers

**Is CVE-2026-37007 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-37007 being exploited in the wild.

**How severe is CVE-2026-37007?** Critical severity, with a CVSS score of 9.8, published 27 August 2026.

**Which products and versions are affected?** CrewAI crewai-tools up to 1.10.2rc1.

**Is there a fix for CVE-2026-37007?** A patch was published on 2026-08-27: Fix applied in commit 713fa7d Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-37007 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-37007?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a path traversal flaw in the FileWriterTool component that fails to properly sanitize filename arguments. An attacker can inject path traversal sequences (e.g., "../") to escape the intended output directory and write files to arbitrary locations on the filesystem. By writing malicious Python code or scripts to executable locations, an attacker can achieve remote code execution. The vulnerability affects crewai-tools versions up to and including 1.10.2rc1. The fix, implemented in commit 713fa7d, adds proper path validation to prevent traversal attacks.

## Affected products

- CrewAI crewai-tools up to 1.10.2rc1

## Timeline

- 2026-08-27: disclosed
- 2026-08-27: patched: Fix applied in commit 713fa7d

## References

- [https://github.com/crewAIInc/crewAI/commit/713fa7d](https://github.com/crewAIInc/crewAI/commit/713fa7d)
- [https://yerangamage.com/cves/detail/?slug=crewai-file-write](https://yerangamage.com/cves/detail/?slug=crewai-file-write)