The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.
| Vendor | Product | Versions |
|---|---|---|
| CrewAI | CrewAI | 1.0 |
Updated description with detailed technical content, changed severity to HIGH, added new CWE ID, and marked the vulnerability as actively exploited with available exploits.
Updated description with detailed technical content, changed severity to HIGH, added CVSS estimate of 7.5, included new CWE IDs, marked as actively exploited, and added relevant MITRE ATT&CK techniques and tags.
Initial creation
