Vulnerabilities in Crawl4AI

9 results

Vexday analysis

Crawl4AI apresenta 9 vulnerabilidades na base, todas publicadas nos últimos 90 dias, com 5 classificadas como críticas; nenhuma está sob exploração ativa conhecida (KEV), o que reduz o risco imediato. A fraqueza dominante é path traversal (CWE-22), indicando problemas de validação de entrada que podem permitir acesso não autorizado a arquivos do sistema.

CVE-2026-56265CRITICALCrawl4AI - Authentication Bypass via Hardcoded JWT Signing KeyEPSS 0.8%CVE-2026-56258CRITICALCrawl4AI - Arbitrary File Write via output_path Symlink and TOCTOUEPSS 0.7%CVE-2026-56266CRITICALCrawl4AI - Server-Side Request Forgery via Direct Crawl EndpointsEPSS 0.5%CVE-2026-56260HIGHCrawl4AI - Arbitrary File Write via output_path ParameterEPSS 0.4%CVE-2026-56262MEDIUMCrawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API ServerEPSS 0.4%CVE-2026-56261CRITICALCrawl4AI - Server-Side Request Forgery via Webhook URLsEPSS 0.4%CVE-2026-56264CRITICALCrawl4AI - Arbitrary JavaScript Execution via /execute_js EndpointEPSS 0.3%CVE-2026-56259HIGHCrawl4AI - LLM Credential Exfiltration via base_url and Environment Variable ResolutionEPSS 0.3%CVE-2026-56263MEDIUMCrawl4AI - Stored Cross-Site Scripting in Monitor DashboardEPSS 0.2%