CVE-2026-2275

Critical

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function…

certcc·CWE-749·Published 2026-03-30

CVSS

9.6

EPSS

0.00

KEV

Exploits

cve.orgen

147 chars

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.

NVDen

147 chars

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.

NVDes

171 chars

La herramienta CodeInterpreter de CrewAI recurre a SandboxPython cuando no puede acceder a Docker, lo que puede habilitar RCE mediante la llamada arbitraria a funciones C.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	9.6	2.8	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H