EUVD-2026-113187

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy modelname field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python...

CVE-2026-119120

The Crawl4AI library (versions 0.9.0 through 0.9.5 ) is vulnerable to untrusted model loading because it fails to filter the CosineStrategy model_name field within Docker API request bodies. This flaw allows authenticated clients to force the server to load a specific HuggingFace model. An attack...

CVE-2026-119120 Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy modelname field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python...