A flaw in the FileWriterTool component of crewai-tools allows an attacker to supply a malicious filename that includes path traversal characters. The tool writes the provided data directly to disk without sanitizing the path, which enables the attacker to create or overwrite arbitrary files. If the application later executes these files or if the attacker can place a script in a directory that is executed by the system, the attacker gains code execution on the host. The weakness corresponds to improper input validation and path traversal.

Any deployment of crewai-tools version 1.10.2rc1 or earlier is affected. The vulnerability resides in the open‑source crewai repository and does not extend to later releases. Users running older releases that expose the FileWriterTool API are at risk.

Because the vulnerability is triggered via a supplied filename and the tool writes files to the server, the attack vector is a remote request to the file creation endpoint. The absence of EPSS data and lack of recognition in the CISA KEV catalog mean exploitation frequency is currently unknown, but the potential for remote code execution classifies this as a high‑severity risk. The CVSS score is not provided in the data, yet the impact level itself signals a critical threat if not mitigated.