CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion

I found a security flaw in IBM's Langflow and CrewAI that lets attackers reach internal networks. I've been auditing AI agent frameworks. These tools let language models browse the web, run shell commands, call APIs. Big attack surface. I wanted to see how they handle URL fetching. I pulled up CrewAI's source and found their SSRF guard. Standard...