CRITICAL10.0CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args from 0, < 0.9.0
CRITICAL10.0CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args from 0, < 0.9.0
CRITICAL10.0CVE-2026-26216Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter from 0, < 0.8.0
CRITICAL10.0Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
from 0, < 0.8.0
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
from 0, < 0.8.7
CRITICAL9.8Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
from 0, < 0.8.7
CRITICAL9.6Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
from 0, < 0.9.0
CRITICAL9.6Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
from 0, < 0.9.0
HIGH8.6Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)
from 0, < 0.9.0
HIGH8.6Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)
from 0, < 0.9.0
HIGH8.6Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
from 0, < 0.8.9
HIGH8.6Crawl4AI Has Local File Inclusion in Docker API via file:// URLs
from 0, < 0.8.0
HIGH8.6Crawl4AI Has Local File Inclusion in Docker API via file:// URLs
from 0, < 0.8.0
HIGH8.2Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution
from 0, < 0.8.8
HIGH8.2Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution
from 0, < 0.8.8
HIGH8.1Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server
from 0, < 0.8.8
HIGH8.1Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server
from 0, < 0.8.8
HIGH7.5Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
from 0, < 0.8.8
—Crawl4AI SSRF vulnerability
from 0, <= 0.4.247
—Crawl4AI SSRF vulnerability
from 0, <= 0.4.247