← fix library

HIGH

CrewAI Studio exposed to the internet

Why it matters

CrewAI Studio is the control plane for multi-agent crews and flows. A public login page means strangers can reach the surface that holds crew definitions and model credentials.

Fix it — 3 steps

  1. Do not publish CrewAI Studio on a public IP; bind to 127.0.0.1 or reach it over VPN/Tailscale.
  2. Put it behind an authenticating reverse proxy with TLS if remote access is required.
  3. Block the port: sudo ufw deny <port>. Rotate model API keys if the Studio sat open.

Verify it’s fixed

curl -m 5 http://YOUR_SERVER_IP:8000/auth/login  # should time out or not render CrewAI Studio

References

Not sure if your stack is exposed?

Run the free check — 30 seconds, safe read-only probes.

Scan your stack