CVE-2026-53754

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.8

Description The Docker API server contains a Server-Side Request Forgery (SSRF) flaw where the protection mechanisms in the validate webhook url() and validate url destination() functions used an incomplete IPv4/IPv6 CIDR blocklist. This allows an unauthenticated attacker to bypass filters and access internal services or cloud metadata endpoints, such as 169.254.169.254, by using the IPv6 unspecified address or encoding internal IPv4 addresses within IPv6 transition forms (including NAT64, 6to4, IPv4-mapped, and IPv4-compatible addresses). The issue affects the following endpoints:

Because the Docker API is unauthenticated by default when jwt enabled is set to false, no credentials are required to exploit this. Additionally, error messages previously leaked resolved internal IP addresses.

Recommendations Update to version 0.8.8. Enable authentication by configuring CRAWL4AI API TOKEN. Restrict the container's outbound network access via an egress firewall or by removing the metadata route.