2025-11 · 2025-Q4
CrewAI "Uncrew" GitHub Token Exposure
Layer tags: not yet tagged.
Target
CrewAI platform
Impact
Single internal GitHub token with admin rights to all private repos exposed; CVSS 9.2
Root Cause
Improper error handling exposed internal GitHub token