CrewAI has a server‑side request forgery flaw that allows attackers to supply arbitrary URLs to the RAG search tools. The flaw permits the application to fetch content from internal and cloud services the system can reach, potentially leaking sensitive data or internal network information.

CrewAI web application is affected. Specific product name is CrewAI. No public version information is listed; the flaw may apply to all current releases.

The vulnerability can be exploited by supplying a crafted URL to the RAG search feature. Because it relies on the application's ability to resolve internal network addresses, the attack is limited to machines and services reachable from the server hosting CrewAI. The risk is high if the premise user can supply malicious input or if the service is exposed to untrusted users. No EPSS score is reported, and the issue is not yet in the CISA KEV catalog, but SSRF bugs are typically considered severe due to the potential for outbound data exfiltration.