Read the docs
TI-2026-40626 Aliases CVE-2026-56261GHSA-f23g-2f38-gg94

Crawl4AI - Server-Side Request Forgery via Webhook URLs

Priority MEDIUM 46CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00513 43rd percentileScored 2026-11-07
Fix Fixed Crawl4AI (Crawl4AI): 0.8.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
unclecodeCrawl4AIbefore 0.8.70.8.7Patch availableCNA
  • Crawl4AI Vendorunclecode Affected before 0.8.7 Fixed in 0.8.7 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*before 0.8.7Vulnerableunclecode
  • cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:* Versions before 0.8.7 Vulnerable ·unclecode

Remediation

  • Fix · CNA Crawl4AI (Crawl4AI) Fixed in 0.8.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56261
  2. 2026-10-03 Alias added: GHSA-f23g-2f38-gg94

References

Advisory 1

Other 1

  • TI-2026-38760 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVSS 3.1CRITICAL 10.0
  • TI-2026-40630 Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key CVSS 4.0CRITICAL 9.3
  • TI-2026-21207 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter CVSS 4.0CRITICAL 10.0
  • TI-2026-41423 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args CVSS 3.1CRITICAL 10.0
  • TI-2026-21208 Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling CVSS 4.0CRITICAL 9.2
  • TI-2026-40631 Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints CVSS 4.0CRITICAL 9.2
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences