CVE-2026-37008

3th percentile - higher than 3% of all known CVEs

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. For example, calling ctypes.CDLL(None) loads the C library without relying in any import statements. In other words, a within-process sandbox cannot merely account for the import system and instead must account for the complete runtime of the Python interpreter.

An attacker can bypass the CrewAI sandbox, gaining access to Python's complete object graph and performing unauthorized operations, leading to takeover of the execution environment.

Update CrewAI to a version containing commit fb2323b or later; if that is not possible, do not rely on a within-process sandbox and use system-level isolation (containers, virtual machines).