CVE-2026-37008

Received Received - Intake

Python Sandbox Escape via Ctypes in CrewAI

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: MITRE

Description

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. For example, calling ctypes.CDLL(None) loads the C library without relying in any import statements. In other words, a within-process sandbox cannot merely account for the import system and instead must account for the complete runtime of the Python interpreter.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-13

Last Modified

2026-09-13

Generated

2026-09-14

AI Q&A

2026-09-14

EPSS Evaluated

N/A

NVD

CVE-2026-37008

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-424	The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

Attack-Flow Graph

Executive Summary

CrewAI before fb2323b uses a Python blocklist that operates at the wrong level of abstraction. Import-time blocking of module names does not prevent access to Python's full object graph. For example, an attacker can bypass restrictions by calling ctypes.CDLL(None) to load the C library without using any imports.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code within a Python process by bypassing import restrictions. It can lead to complete system compromise, data theft, or unauthorized actions depending on the application's context.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strict code execution controls, such as GDPR's data processing security or HIPAA's access controls. Failure to prevent unauthorized code execution may result in non-compliance penalties.

Mitigation Strategies

Implement a within-process sandbox that accounts for the complete runtime of the Python interpreter, not just import-time blocking. This includes monitoring for direct calls like ctypes.CDLL(None) that bypass import restrictions.

Hi! I’m here to help you understand CVE-2026-37008. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70