Skip to content
OpenAdvisories

Vendor

crawlab-team

2 known vulnerabilities.

Products

crawlab 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-90945

    Crawlab through 0.6.3 Authentication Bypass via Hard-coded JWT Secret

    Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute cod…

    crawlab-team crawlab