CVE-2026-119118 Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags

Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-certificate-errors. Man-in-the-middle or DNS-controlling attackers can serve forged content to the crawler and read...