Crawl4AI — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Crawl4AI. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Crawl4AI: Crawl4AI

HighGHSA-9889-c77f-r2cq2026-07-12

LLM credential exfiltration in Docker server via request base_url and env: token resolution · Advisory · unclecode/crawl

CriticalGHSA-2553-r9jv-qg442026-07-07

Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args · Advisory · unclecode/crawl4ai

Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream) · Advisory · unclecode/crawl4ai · GitHub

HighGHSA-6qhc-x826-342c2026-06-27

SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check · Advisory · unclecode/crawl4ai · GitHub

Critical2026-06-27

Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution · Advisory · unclecode/crawl4ai ·

HighGHSA-7cx2-g3h9-382p2026-06-27

Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server · Advisory · unclecode/craw

Local File Inclusion in Docker API via file:// URLs · Advisory · unclecode/crawl4ai · GitHub

Critical2026-02-13

Remote Code Execution in Docker API via Hooks Parameter · Advisory · unclecode/crawl4ai · GitHub

Showing up to 20 recent security advisories. View all →

This page lists every published CVE security advisory associated with Crawl4AI. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.