CVE-2026-56265: Use of Hard-coded Credentials

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected...

Server-side Request Forgery (SSRF)

Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the handlestreamcrawlrequest process. An attacker can access internal-only services and cloud-metadata endpoints by sending...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57573 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57573 Source advisory: SNYK:PYTHON-CRAWL4AI-17661145...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57573 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57573 Source advisory: OSV:GHSA-WM69-2PC3-RMMF...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by unknown CVE via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: unknown CVE Source advisory: GHSA-WM69-2PC3-RMMF...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57572 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57572 Source advisory: OSV:GHSA-R253-R9JW-QG44...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by unknown CVE via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: unknown CVE Source advisory: GHSA-R253-R9JW-QG44...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57572 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57572 Source advisory: SNYK:PYTHON-CRAWL4AI-17661143...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by unknown CVE via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: unknown CVE Source advisory: GHSA-2JQ4-Q6VV-4CP3...

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

Summary When the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path e.g. /etc/cron.d/evil or ../ traversal escaped the downloads directory, giving an...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57571 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57571 Source advisory: SNYK:PYTHON-CRAWL4AI-17661144...

Symlink Attack

Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Symlink Attack via the download process. An attacker can overwrite arbitrary files with attacker-controlled content by supplying crafted filenames containing...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +20 more potentially affected by CVE-2026-57571 via crawl4ai (>=0.3.731, <=0.8.9)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-57571 Source advisory: OSV:GHSA-2JQ4-Q6VV-4CP3...

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

When the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path e.g. /etc/cron.d/evil or ../ traversal escaped the downloads directory, giving an arbitrary...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-53755 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-53755 Source advisory: SNYK:PYTHON-CRAWL4AI-17661142...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-53755 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-53755 Source advisory: OSV:GHSA-6QHC-X826-342C...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-53755 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-53755 Source advisory: GHSA-6QHC-X826-342C...

Server-side Request Forgery (SSRF)

Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the proxyconfig.server parameter in the browserconfig or crawlerconfig objects, as well as related proxy settings in extraarg...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-56258 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-56258 Source advisory: OSV:GHSA-7CX2-G3H9-382P...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +19 more potentially affected by CVE-2026-56258 via crawl4ai (>=0.3.731, <=0.8.5)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.7.5b6 and more Source cves: CVE-2026-56258 Source advisory: SNYK:PYTHON-CRAWL4AI-17661141...