CVE-2026-2275
CVE-2026-2275
CVSS Score
9.6
EPSS Score
0.0%
EPSS Percentile
5th
The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.
| Vendor | crewai |
| Product | crewai |
| Published | Mar 30, 2026 |
| Last Updated | Mar 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for crewai crewai
Be the first to know when new critical vulnerabilities affecting crewai crewai are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CrewAI / CrewAI
1.0