Crawl4AI vulnerabilities
9 published CVEs name Crawl4AI among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 5Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-56260
Crawl4AI - Arbitrary File Write via output_path Parameter
Crawl4AI · Crawl4AI
High8.8 - CVE-2026-56259
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
Crawl4AI · Crawl4AI
High8.8 - CVE-2026-56261
Crawl4AI - Server-Side Request Forgery via Webhook URLs
Crawl4AI · Crawl4AI
Critical9.2 - CVE-2026-56264
Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint
Crawl4AI · Crawl4AI
Critical9.2 - CVE-2026-56262
Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server
Crawl4AI · Crawl4AI
Medium6.9 - CVE-2026-56263
Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard
Crawl4AI · Crawl4AI
Medium5.3 - CVE-2026-56258
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
Crawl4AI · Crawl4AI
Critical9.2 - CVE-2026-56266
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
Crawl4AI · Crawl4AI
Critical9.2 - CVE-2026-56265
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
Crawl4AI · Crawl4AI
Critical9.3