CVE-2026-37008: CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vu

CrewAI before commit fb2323b has a security flaw in how it tries to block dangerous code: it only blocks imports (the statements that load Python modules) but misses other ways to access dangerous functions, like using ctypes.CDLL(None) to directly load the C library without any import statements. This means the sandbox (an isolated environment meant to restrict what code can do) is incomplete because it doesn't account for all the ways Python can access powerful system functions at runtime.