Rip&Tear 6fc0914f26 fix: add base_dir path containment to FileWriterTool ...

os.path.join does not prevent traversal — joining "./" with "../../../etc/cron.d/pwned"
resolves cleanly outside any intended scope. The tool also called os.makedirs on
the unvalidated path, meaning it would create arbitrary directory structures.

Adds a base_dir parameter that uses os.path.realpath() to resolve the final path
(including symlinks) before checking containment. Any filename or directory argument
that resolves outside base_dir is rejected before any filesystem operation occurs.

When base_dir is not set the tool behaves as before — only use that in fully
sandboxed environments.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 23:51:01 +08:00

..

crewai

Code interpreter sandbox escape (#4791)

2026-03-15 13:18:02 +08:00

crewai-files

feat: bump versions to 1.10.2rc2

2026-03-14 00:34:12 -04:00

crewai-tools

fix: add base_dir path containment to FileWriterTool

2026-03-15 23:51:01 +08:00

devtools

feat: bump versions to 1.10.2rc2

2026-03-14 00:34:12 -04:00