Vulnerabilities in Crawl4AI

9 results

CVE-2026-56265CRITICALCrawl4AI - Authentication Bypass via Hardcoded JWT Signing KeyEPSS 2.6%CVE-2026-56258CRITICALCrawl4AI - Arbitrary File Write via output_path Symlink and TOCTOUEPSS 0.9%CVE-2026-56262MEDIUMCrawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API ServerEPSS 0.8%CVE-2026-56260HIGHCrawl4AI - Arbitrary File Write via output_path ParameterEPSS 0.6%CVE-2026-56261CRITICALCrawl4AI - Server-Side Request Forgery via Webhook URLsEPSS 0.5%CVE-2026-56264CRITICALCrawl4AI - Arbitrary JavaScript Execution via /execute_js EndpointEPSS 0.5%CVE-2026-56266CRITICALCrawl4AI - Server-Side Request Forgery via Direct Crawl EndpointsEPSS 0.5%CVE-2026-56259HIGHCrawl4AI - LLM Credential Exfiltration via base_url and Environment Variable ResolutionEPSS 0.4%CVE-2026-56263MEDIUMCrawl4AI - Stored Cross-Site Scripting in Monitor DashboardEPSS 0.3%