{"uuid": "6253ed9b-c296-4338-9ba9-6bf4d070cac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-37008", "type": "seen", "source": "https://gist.github.com/ichintu/66ee5056fb951ebe1cfdbe3d6efa4dc0", "content": "**CVE-2026-37008** is a high-severity (8.1) vulnerability in CrewAI versions prior to commit `fb2323b`. It stems from a flawed security blocklist that only restricts Python imports, leaving the broader interpreter runtime unsecured. Attackers can bypass in-process sandbox controls by directly invoking interpreter functions (e.g., `ctypes.CDLL(None)`) to load C libraries without triggering import checks. Effective mitigation requires enforcing restrictions across the entire Python runtime, not just the import system.", "creation_timestamp": "2026-09-14T00:03:14.530399Z"}