Remote code execution via unchecked file path

Path traversal in CrewAI crewai-tools 1.10.2rc1 and earlier allows remote attackers to execute code via a crafted filename. FileWriterTool joins the caller-controlled filename to a target directory and writes content without first resolving the path and enforcing directory containment. Exploitation requires a deployment that passes remote input into the tool, and traversal, absolute-path, or symlink targets can write attacker-chosen content outside the intended directory.