Vulnerabilities for Crawl4AI

First version without a known vulnerability: 0.9.0

Details

• GHSA-wm69-2pc3-rmmf2026-06-18

  Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

  Fixed in: 0.9.0

• GHSA-r253-r9jw-qg442026-06-18

  Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

  Fixed in: 0.9.0

• GHSA-2jq4-q6vv-4cp32026-06-18

  Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

  Fixed in: 0.9.0

• GHSA-6qhc-x826-342c2026-06-16

  Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

  Fixed in: 0.8.9

• GHSA-7cx2-g3h9-382p2026-06-16

  Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

  Fixed in: 0.8.8

• GHSA-f989-c77f-r2cq2026-06-16

  Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution

  Fixed in: 0.8.8

• GHSA-4qqr-vv2q-cmr52026-06-16

  Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

  Fixed in: 0.8.8

• GHSA-365w-hqf6-vxfg2026-06-16

  Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

  Fixed in: 0.8.7

• GHSA-qxjp-w3pj-48m72026-06-16

  Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

  Fixed in: 0.8.7

• GHSA-5882-5rx9-xgxp2026-01-16

  Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

  Fixed in: 0.8.0

• GHSA-vx9w-5cx4-97962026-01-16

  Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

  Fixed in: 0.8.0

• GHSA-445m-27cf-gr3x2025-04-18

  Crawl4AI SSRF vulnerability