CVE-2026-2275

Critical

Published: 30 March 2026

Published

30 March 2026

Modified

01 April 2026

KEV Added

—

Patch

—

CVSS Score v3.1 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS Score 0.0044 35.2th percentile

Risk Priority 70 floored blend · peak EPSS

Summary

CVE-2026-2275 is a critical-severity Exposed Dangerous Method or Function (CWE-749) vulnerability in Crewai (inferred from references). Its CVSS base score is 9.6 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 35.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Supply Chain and Deployment risk domain.

The strongest mitigations our analysis identified are NIST 800-53 CM-7 (Least Functionality) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2026-2275 is a high-severity vulnerability in the CrewAI CodeInterpreter tool, published on 2026-03-30. The issue arises when the tool cannot connect to Docker and falls back to SandboxPython, allowing remote code execution (RCE) via arbitrary C function calling. It carries a CVSS v3.1 base score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) and maps to CWE-749 (Exposed Dangerous Method or Function).

A remote, unauthenticated attacker can exploit this vulnerability over the network with low complexity, though it requires user interaction. Exploitation enables high-impact compromise of confidentiality, integrity, and availability across the affected scope, culminating in arbitrary code execution on the host system through malicious input that triggers the fallback mechanism.

Mitigation guidance is available in the CrewAI documentation at https://docs.crewai.com/en/tools/ai-ml/codeinterpretertool and the CERT advisory at https://www.kb.cert.org/vuls/id/221883.