Skip to content
OpenAdvisories

Vendor

Crawl4AI

9 known vulnerabilities.

Products

Crawl4AI 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-56260

    Crawl4AI - Arbitrary File Write via output_path Parameter

    Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-tr…

    Crawl4AI Crawl4AI crawl4ai PyPI
  • Critical 9.8
    CVE-2026-56265 Scanner template

    Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

    Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gain…

    Crawl4AI Crawl4AI