ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26216 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26216 Source advisory: MEND:CVE-2026-26216...

CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

Crawl4AI path traversal vulnerability

Crawl4AI is an open-source, LLM-friendly web crawler developed by UncleCode’s individual developers. Versions of Crawl4AI prior to 0.8.0 contained a path traversal vulnerability. This vulnerability stemmed from multiple endpoints in the Docker API that accepted file:// URLs, allowing...

Crawl4AI code injection vulnerability

Crawl4AI is an open-source, LLM-friendly web crawler developed by UncleCode’s individual developers. Versions of Crawl4AI prior to 0.8.0 contained a code injection vulnerability. This vulnerability stemmed from the /crawl endpoint in the Docker API deployment, which accepted hooks parameters...

CVE-2026-26216: Improper Control of Generation of Code

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

CVE-2026-26217: Improper Limitation of a Pathname to a Restricted Directory

Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /executejs, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the server filesystem. An attacker can...

EUVD-2026-2914

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26216 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26216 Source advisory: GHSA-5882-5RX9-XGXP...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26216 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26216 Source advisory: OSV:GHSA-5882-5RX9-XGXP...

GHSA-5882-5RX9-XGXP Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing attackers to import arbitrary modules an...

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing attackers to import arbitrary modules an...

EUVD-2026-2915

Crawl4AI Has Local File Inclusion in Docker API via file:// URLs...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26217 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26217 Source advisory: OSV:GHSA-VX9W-5CX4-9796...

Directory Traversal

Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Directory Traversal via the Docker API endpoints that accept file:// URLs. An attacker can access sensitive files on the server filesystem by submitting crafted...

GHSA-VX9W-5CX4-9796 Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

A local file inclusion vulnerability exists in the Crawl4AI Docker API. The /executejs, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing attackers to read arbitrary files from the server filesystem. Attack Vector: json POST /executejs "url": "file:///etc/passwd", "scripts":...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26217 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26217 Source advisory: GHSA-VX9W-5CX4-9796...

ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +16 more potentially affected by CVE-2026-26217 via crawl4ai (>=0.3.731, <=0.7.8)

crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.8, =0.0.11 and more Source cves: CVE-2026-26217 Source advisory: SNYK:PYTHON-CRAWL4AI-15033115...

PT-2026-4847

A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing attackers to import arbitrary modules an...

PT-2026-4851

A local file inclusion vulnerability exists in the Crawl4AI Docker API. The /execute js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing attackers to read arbitrary files from the server filesystem. Attack Vector: json POST /execute js "url": "file:///etc/passwd", "scripts":...