PT-2026-29048 · Crewai+1 · Crewai+1

Yarden Porat · Publicado 2026-03-30 · Atualizado 2026-04-06 · CVE-2026-2275

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CrewAI versions (affected versions not specified)

Description The CodeInterpreter tool within CrewAI reverts to SandboxPython when Docker is unreachable. This fallback can allow for Remote Code Execution (RCE) through the ability to call arbitrary C functions. The tool utilizes the SandboxPython environment, and the issue arises when it cannot connect to Docker, potentially enabling malicious code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-749

Identificadores relacionados

CVE-2026-2275

Produtos afetados

Crewai

Sandboxpython

Referências · 10

• https://kb.cert.org/vuls/id/221883 · Publicação no Reddit
• https://docs.crewai.com/en/tools/ai-ml/codeinterpretertool · Nota
• https://twitter.com/CVEnew/status/2039004526414307407 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-2275 · Nota de Segurança
• https://twitter.com/TheHackerWire/status/2039236373153222983 · Publicação no Twitter
• https://twitter.com/PwrtYrdn/status/2039327529316540425 · Publicação no Twitter
• https://twitter.com/theagentcop/status/2041163440832602240 · Publicação no Twitter
• https://twitter.com/eyalestrin/status/2040303378459398383 · Publicação no Twitter
• https://reddit.com/r/pwnhub/comments/1s8rqzh/crewai_vulnerabilities_open_door_to_hacking · Publicação no Reddit
• https://twitter.com/infoflowcloud/status/2039006700343083363 · Publicação no Twitter