PT-2026-29048 · Crewai+1 · Crewai+1

Yarden Porat · Published 2026-03-30 · Updated 2026-04-06 · CVE-2026-2275

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CrewAI versions (affected versions not specified)

Description The CodeInterpreter tool within CrewAI reverts to SandboxPython when Docker is unreachable. This fallback can allow for Remote Code Execution (RCE) through the ability to call arbitrary C functions. The tool utilizes the SandboxPython environment, and the issue arises when it cannot connect to Docker, potentially enabling malicious code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2026-2275

Affected Products

Crewai

Sandboxpython

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-2275 · Security Note
• https://reddit.com/r/pwnhub/comments/1s8rqzh/crewai_vulnerabilities_open_door_to_hacking · Reddit Post
• https://kb.cert.org/vuls/id/221883 · Reddit Post
• https://twitter.com/PwrtYrdn/status/2039327529316540425 · Twitter Post
• https://twitter.com/infoflowcloud/status/2039006700343083363 · Twitter Post
• https://twitter.com/theagentcop/status/2041163440832602240 · Twitter Post
• https://twitter.com/TheHackerWire/status/2039236373153222983 · Twitter Post
• https://twitter.com/CVEnew/status/2039004526414307407 · Twitter Post
• https://twitter.com/eyalestrin/status/2040303378459398383 · Twitter Post
• https://docs.crewai.com/en/tools/ai-ml/codeinterpretertool · Note