AIKIDO-2026-11091
crewai-tools is vulnerable to Information Disclosure
59
Medium Risk
This Affects:
crewai-toolsTL;DR
The RagTool adapter field held live runtime objects that were included when the tool was JSON-serialized during agent tool-calling or checkpoint flows. That could expose internal adapter state to LLM-visible outputs, logs, or persisted checkpoints. The fix serializes the adapter as null and rebuilds a fresh adapter from the tool configuration after deserialization.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
crewai-tools is vulnerable to Information Disclosure in versions 1.0.0 - 1.14.5.
How to fix this
Upgrade the crewai-tools library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant