9.6 Critical
CVE-2026-2275
CVE-2026-2275
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 38% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.
Coverage 1 article · 1 outlet
- CrewAI Vulnerabilities Expose Devices to HackingSecurityWeek · first in our coverage