Remote Code Execution Vulnerability in CrewAI Tool by CrewAI
CVE-2026-2275

9.6CRITICAL

Key Information:

Vendor

Crewai

Status
Crewai
Vendor
CVE Published:
30 March 2026

What is CVE-2026-2275?

The CrewAI CodeInterpreter tool contains a vulnerability that occurs when the tool defaults to using SandboxPython due to its inability to connect to Docker. This fallback mechanism exposes the application to potential Remote Code Execution (RCE), as it allows malicious actors to execute arbitrary C functions within the context of the affected environment. This could lead to unauthorized access and manipulation of sensitive data and system configurations. It is crucial for users of the CrewAI CodeInterpreter tool to assess their risk exposure and take appropriate measures to secure their systems.

Affected Version(s)

CrewAI 1.0

References

https://docs.crewai.com/en/tools/ai-ml/codeinterpretertool
https://www.kb.cert.org/vuls/id/221883

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.