# CVE-2026-37009: crewai-tools NL2SQLTool SQL injection

Source: https://junglewise.ai/threats/cve-2026-37009-crewai-tools-nl2sqltool-sql-injection  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-27. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-37009 · Severity: medium · CVSS 6.5 · Published 2026-08-27

crewai-tools is a library providing AI-powered tools for the CrewAI framework, including NL2SQLTool which converts natural language queries to SQL commands. A SQL injection vulnerability in this component allows attackers to execute arbitrary SQL commands by crafting malicious input, potentially leading to unauthorized data access, modification, or deletion in connected databases.

## Quick answers

**Is CVE-2026-37009 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-37009 being exploited in the wild.

**How severe is CVE-2026-37009?** Medium severity, with a CVSS score of 6.5, published 27 August 2026.

**Which products and versions are affected?** CrewAI crewai-tools v1.10.2rc1.

**Is there a fix for CVE-2026-37009?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-37009 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-37009?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a SQL injection flaw in the NL2SQLTool component of crewai-tools v1.10.2rc1, where the sql_query argument is not properly sanitized before being used in database queries. An attacker can supply specially crafted SQL payloads through the unsanitized parameter to execute arbitrary SQL commands. The attack requires network access to the application using the affected tool, and the attacker must be able to interact with the NL2SQLTool interface. Successful exploitation allows arbitrary SQL execution against the underlying database. A patch is presumed available in later versions.

## Affected products

- CrewAI crewai-tools v1.10.2rc1

## Timeline

- 2026-08-27: disclosed

## References

- [http://crewaiinc.com/](http://crewaiinc.com/)
- [https://yerangamage.com/cves/detail/?slug=crewai-nl2sql-injection](https://yerangamage.com/cves/detail/?slug=crewai-nl2sql-injection)