A flaw in the FileWriterTool component of crewai-tools allows an attacker to supply a malicious filename that includes path traversal characters. The tool writes the provided data directly to disk without sanitizing the path, which enables the attacker to create or overwrite arbitrary files. If the application later executes these files or if the attacker can place a script in a directory that is executed by the system, the attacker gains code execution on the host. The weakness corresponds to improper input validation and path traversal.

Any deployment of crewai-tools version 1.10.2rc1 or earlier is affected. The vulnerability resides in the open‑source crewai repository and does not extend to later releases. Users running older releases that expose the FileWriterTool API are at risk.

Because the vulnerability is triggered via a supplied filename and the tool writes files to the server, the attack vector is a remote request to the file creation endpoint. The EPSS score of 0.00258 suggests that exploitation frequency is currently very low, but the CVSS score of 9.8 indicates a high‑severity class of risk. The vulnerability is not listed in the CISA KEV catalog, so it is not a known exploited vulnerability. Despite the low probability of exploitation, the potential for remote code execution classifies this as a high‑severity risk that should be mitigated promptly.