Read the docs
TI-2026-40630 Aliases CVE-2026-56265GHSA-8qrg-7j2f-rf2h

Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

Priority HIGH 81CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-798.

Summary

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected functionality.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.02639 85th percentileScored 2026-11-07
Fix Fixed Crawl4AI (Crawl4AI): 0.8.7crawl4ai (PyPI): 0.8.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
unclecodeCrawl4AIbefore 0.8.70.8.7Patch availableCNA
—crawl4ai (PyPI)before 0.8.70.8.7Patch availableGHSA-8qrg-7j2f-rf2h
  • Crawl4AI Vendorunclecode Affected before 0.8.7 Fixed in 0.8.7 Patch available CNA
  • crawl4ai (PyPI) Vendor— Affected before 0.8.7 Fixed in 0.8.7 Patch available GHSA-8qrg-7j2f-rf2h

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*before 0.8.7Vulnerableunclecode
  • cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:* Versions before 0.8.7 Vulnerable ·unclecode

Remediation

  • Fix · CNA Crawl4AI (Crawl4AI) Fixed in 0.8.7
  • Fix · GHSA-8qrg-7j2f-rf2h crawl4ai (PyPI) Fixed in 0.8.7 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56265
  2. 2026-10-03 Alias added: GHSA-8qrg-7j2f-rf2h

References

Advisory 2

Other 2

  • TI-2026-38760 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API CVSS 3.1CRITICAL 10.0
  • TI-2026-21207 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter CVSS 4.0CRITICAL 10.0
  • TI-2026-41423 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args CVSS 3.1CRITICAL 10.0
  • TI-2026-21208 Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling CVSS 4.0CRITICAL 9.2
  • TI-2026-40631 Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints CVSS 4.0CRITICAL 9.2
  • TI-2025-20742 Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py. CVSS 3.1CRITICAL 9.1
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences