TI-2026-38760 CVE-2026-53753 · GHSA-qxjp-w3pj-48m7
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
Priority HIGH 82
Crawl4AI is an open-source LLM friendly web crawler & scraper.
unclecode
Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
unclecode records in CISA KEVNo unclecode vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records in Crawl4ai · all components
TI-2026-40630 CVE-2026-56265 · GHSA-8qrg-7j2f-rf2h
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
Priority HIGH 81
Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server.
TI-2026-21207 CVE-2026-26216 · GHSA-5882-5rx9-xgxp
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
Priority MEDIUM 58
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment.
TI-2026-41423 CVE-2026-57572
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
Priority MEDIUM 51
Crawl4AI is an open-source LLM-friendly web crawler and scraper.
TI-2026-21208 CVE-2026-26217 · GHSA-vx9w-5cx4-9796
Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling
Priority MEDIUM 50
Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment.
TI-2026-40631 CVE-2026-56266 · GHSA-365w-hqf6-vxfg
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
Priority MEDIUM 48
Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation.
TI-2025-20742 CVE-2025-28197 · GHSA-445m-27cf-gr3x
Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.
Priority MEDIUM 47
Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.
TI-2026-40626 CVE-2026-56261 · GHSA-f23g-2f38-gg94
Crawl4AI - Server-Side Request Forgery via Webhook URLs
Priority MEDIUM 46
Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation.
TI-2026-38762 CVE-2026-53755 · GHSA-6qhc-x826-342c
Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
Priority MEDIUM 46
Crawl4AI is an open-source LLM friendly web crawler & scraper.
TI-2026-40625 CVE-2026-56260 · GHSA-r9hw-78q5-478g
Crawl4AI - Arbitrary File Write via output_path Parameter
Priority MEDIUM 45
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints.
Priority MEDIUM 44
Crawl4AI is an open-source LLM-friendly web crawler and scraper.
Priority MEDIUM 44
Crawl4AI is an open-source LLM-friendly web crawler and scraper.
TI-2026-40624 CVE-2026-56259 · GHSA-mw9f-q68p-364x
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
Priority MEDIUM 44
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables.
TI-2026-40623 CVE-2026-56258 · GHSA-wx2c-3cp2-f6qw
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
Priority MEDIUM 43
Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink and time-of-check-t…
TI-2026-40629 CVE-2026-56264 · GHSA-g2pv-76hm-j4x9
Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint
Priority MEDIUM 42
Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser contex…
TI-2026-38761 CVE-2026-53754 · GHSA-4qqr-vv2q-cmr5
Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
Priority LOW 39
Crawl4AI is an open-source LLM friendly web crawler & scraper.
TI-2026-40627 CVE-2026-56262 · GHSA-xrfj-6m49-wfmm
Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server
Priority LOW 38
Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations.
TI-2026-40628 CVE-2026-56263 · GHSA-53rg-46cm-4g2v
Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard
Priority LOW 24
Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping.