mirror of https://github.com/crewAIInc/crewAI.git synced 2026-07-01 21:28:10 +00:00

Files

Rip&Tear 750684ca36 fix: enforce owner-only permissions on credential files

Credentials stored at rest were left world-readable on multi-user hosts:

- TokenManager._get_secure_storage_path() documented its credential dir as
  mode 0o700 but created it via mkdir() with default perms (0o755), leaving
  the Fernet secret.key and encrypted tokens.enc in a traversable dir.
- Settings.dump() persisted tool_repository_password (plaintext) to
  settings.json via open("w"), producing a 0o644 file, and created the
  config dir at 0o755 — despite the sibling token_manager already writing
  secrets atomically at 0o600.

Fixes:
- TokenManager: chmod the credential dir to 0o700 after mkdir (robust against
  umask and pre-existing dirs).
- Settings: write settings.json atomically at 0o600 (mkstemp + chmod +
  os.replace) and chmod the dedicated config dir to 0o700. The /tmp and cwd
  fallback parents are deliberately not chmod'd; the 0o600 file mode protects
  the credential there.

Adds regression tests asserting 0o600 files and 0o700 dirs, and that shared
fallback dirs are not globally tightened.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-19 14:23:30 +08:00

src/crewai_core

fix: enforce owner-only permissions on credential files

2026-06-19 14:23:30 +08:00

tests

Add expressions to FlowDefinition actions (#6145 )

2026-06-12 21:56:02 -07:00

pyproject.toml

fix(deps): bump pyjwt to >=2.13.0 to patch CVEs

2026-06-02 10:01:53 -07:00

README.md

refactor: extract CLI into standalone crewai-cli package

2026-05-06 20:46:46 +08:00

README.md

crewai-core

Shared utilities used by both crewai and crewai-cli: version lookup, storage paths, user-data helpers, telemetry, and the printer.

This package is a leaf — it has no dependency on the crewai framework — and is pulled in transitively by crewai and crewai-cli. End users do not normally install it directly.