{"id":"CVE-2026-37008","title":"CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275","summary":"CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's co…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","cwe":["CWE-424"],"vendor":"CrewAI","product":"CrewAI","affected":["CrewAI < fb2323b3deb3ec62b3965526857e77a2264e4cd0"],"published":"2026-09-13","updated":"2026-09-22","sourceUpdated":"2026-09-22T20:00:03.713","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-37008","references":[{"url":"https://docs.python.org/3/library/ctypes.html","label":"cve@mitre.org"},{"url":"https://github.com/crewAIInc/crewAI/commit/fb2323b3deb3ec62b3965526857e77a2264e4cd0","label":"cve@mitre.org"},{"url":"https://yerangamage.com/cves/detail/?slug=crewai-sandbox-escape","label":"cve@mitre.org"},{"url":"https://yerangamage.com/cves/detail/?slug=crewai-sandbox-escape","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00128,"epssPercentile":0.02825,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-14T16:37:48.591207Z"},"ingestedAt":"2026-09-14T15:23:07.468Z","slug":"CVE-2026-37008","body":"## Overview\n\nCrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. For example, calling ctypes.CDLL(None) loads the C library without relying in any import statements. In other words, a within-process sandbox cannot merely account for the import system and instead must account for the complete runtime of the Python interpreter.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":44.6,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":203073,"id":"CVE-2026-37008","ts":1789409572195,"field":"exploit_available","old":"false","new":"true"}]}