Skip to content
OpenAdvisories

Package · PyPI

crawl4ai

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2026-56259

    Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

    Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated…

    Crawl4AI Crawl4AI crawl4ai PyPI
  • High 8.6
    CVE-2026-57573

    Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint

    Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handle_stream_crawl_request passed seed URLs straight to …

    unclecode Crawl4AI crawl4ai PyPI
  • High 7.5
    CVE-2026-53754

    Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

    Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used an explicit IPv4/IPv6 CIDR blocklist that missed several ad…

    unclecode Crawl4AI crawl4ai PyPI
  • High 8.6
    CVE-2026-53755 Scanner template

    Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

    Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an inte…

    unclecode Crawl4AI crawl4ai PyPI
  • High 8.1
    CVE-2026-56258

    Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU

    Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink and time-of-check-time-of-use (TOCTOU) attacks on the outp…

    Crawl4AI Crawl4AI crawl4ai PyPI
  • High 8.6
    CVE-2026-26217 Scanner template

    Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling

    Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the…

    unclecode Crawl4AI crawl4ai PyPI