CVE-2026-37008

CrewAI CodeInterpreter Sandbox Escape Vulnerability CVE-2026-2275 Enables Remote Command Injection in Multi-Agent Pipelines

CrewAI maintainers resolve vulnerability CVE-2026-2275 in CodeInterpreter tool allowing arbitrary host command execution via malicious Python payloads.