CVE-2026-109239

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.9.4

Description A blind server-side request forgery (SSRF) exists in the can fetch() function of the RobotsParser. This allows unauthenticated attackers to bypass Docker server egress controls by enabling check robots txt and utilizing redirects or DNS rebinding. This technique can be used to access internal, loopback, or cloud-metadata addresses for service discovery. SSRF is a flaw where an attacker can induce the server to make requests to an unintended location.

Recommendations Update to version 0.9.4 or later.