CVE-2026-109237

Name of the Vulnerable Software and Affected Versions Crawl4AI versions 0.9.0 through 0.9.3

Description An untrusted-config gate bypass allows non-admin API clients to create forbidden configuration objects by using dict-type wrappers. An attacker can send a manipulated LLMConfig object where the api token is set to an environment reference through the '/config/dump' endpoint. This allows the unauthorized reading of the SECRET KEY and provider keys, which can be used to forge admin JSON Web Tokens (JWT), a compact and self-contained way for securely transmitting information between parties as a JSON object.

Recommendations Update Crawl4AI to version 0.9.4 or later.