CVE-2026-37009 - CERT CVE

  1. CVE-2026-37009

ID CVE-2026-37009
Sažetak A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 27-08-2026 - 20:17
Objavljeno 27-08-2026 - 20:17