Skip to content
OpenAdvisories

Vendor

crawlab-team

2 known vulnerabilities.

Products

crawlab 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-75103

    Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover

    Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator cr…

    crawlab-team crawlab