Executive brief
crewai-tools is a library providing AI-powered tools for the CrewAI framework, including NL2SQLTool which converts natural language queries to SQL commands. A SQL injection vulnerability in this component allows attackers to execute arbitrary SQL commands by crafting malicious input, potentially leading to unauthorized data access, modification, or deletion in connected databases.
Technical details
The vulnerability is a SQL injection flaw in the NL2SQLTool component of crewai-tools v1.10.2rc1, where the sql_query argument is not properly sanitized before being used in database queries. An attacker can supply specially crafted SQL payloads through the unsanitized parameter to execute arbitrary SQL commands. The attack requires network access to the application using the affected tool, and the attacker must be able to interact with the NL2SQLTool interface. Successful exploitation allows arbitrary SQL execution against the underlying database. A patch is presumed available in later versions.
Affected products
- CrewAI crewai-tools v1.10.2rc1
Timeline
- 2026-08-27: disclosed