Read the docs
TI-2026-38761 Aliases CVE-2026-53754GHSA-4qqr-vv2q-cmr5

Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

Priority LOW 39CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach internal services and cloud metadata endpoints (e.g. 169.254.169.254) despite the filter by encoding an internal IPv4 address inside an IPv6 transition form, or by using the IPv6 unspecified address. Because the Docker API is unauthenticated by default (jwt_enabled: false), no credentials are required. This vulnerability is fixed in 0.8.8.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00433 37th percentileScored 2026-11-07
Fix Fixed crawl4ai (unclecode): 0.8.8crawl4ai (PyPI): 0.8.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
unclecodecrawl4aibefore 0.8.80.8.8Patch availableCNA
—crawl4ai (PyPI)before 0.8.80.8.8Patch availableGHSA-4qqr-vv2q-cmr5
  • crawl4ai Vendorunclecode Affected before 0.8.8 Fixed in 0.8.8 Patch available CNA
  • crawl4ai (PyPI) Vendor— Affected before 0.8.8 Fixed in 0.8.8 Patch available GHSA-4qqr-vv2q-cmr5

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*before 0.8.8Vulnerableunclecode
  • cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:* Versions before 0.8.8 Vulnerable ·unclecode

Remediation

  • Fix · CNA crawl4ai (unclecode) Fixed in 0.8.8
  • Fix · GHSA-4qqr-vv2q-cmr5 crawl4ai (PyPI) Fixed in 0.8.8 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-53754
  2. 2026-10-03 Alias added: GHSA-4qqr-vv2q-cmr5

References

Advisory 2

Other 2

  • TI-2026-38760 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVSS 3.1CRITICAL 10.0
  • TI-2026-40630 Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key CVSS 4.0CRITICAL 9.3
  • TI-2026-21207 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter CVSS 4.0CRITICAL 10.0
  • TI-2026-41423 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args CVSS 3.1CRITICAL 10.0
  • TI-2026-21208 Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling CVSS 4.0CRITICAL 9.2
  • TI-2026-40631 Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints CVSS 4.0CRITICAL 9.2
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences