Skip to content
OpenAdvisories

Vendor

unclecode

23 known vulnerabilities.

Products

Crawl4AI 23
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-91940 Public exploit

    crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy

    crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validate untrusted configuration fields. Attackers can submit crafted config bodies with malicious image_sa…

    unclecode Crawl4AI
  • Critical 9.8
    CVE-2026-53753 Public exploit

    Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

    Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object at…

    unclecode Crawl4AI crawl4ai PyPI
  • Critical 10.0
    CVE-2026-26216 Public exploit

    Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

    Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed…

    unclecode Crawl4AI crawl4ai PyPI