CVE-2026-56266

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.7

Description Multiple security issues affect the Crawl4AI Docker API server. The software is susceptible to Server-Side Request Forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location, through the '/crawl', '/crawl/stream', '/md', '/llm', '/crawl/job', and '/llm/job' endpoints. Attackers can bypass internal-address blocklists using IPv6-mapped IPv4 addresses to access internal services, Docker networks, and cloud metadata endpoints. Additionally, the '/screenshot' and '/pdf' endpoints allow arbitrary file writes via the output path parameter, enabling the overwriting of server files. The '/execute js' endpoint allows arbitrary JavaScript execution in the server's browser. Other issues include an authentication bypass on monitor endpoints, stored Cross-Site Scripting (XSS) in the monitor dashboard, and a hardcoded JWT secret key that allows the forgery of authentication tokens.

Recommendations Update to version 0.8.7 or later. Set CRAWL4AI API TOKEN to enable authentication. Set a strong SECRET KEY with at least 32 characters if using JWT. Restrict network access to the Docker API. As a temporary mitigation, disable the /execute js endpoint using the CRAWL4AI EXECUTE JS ENABLED environment variable.