CVE-2026-26216

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.0

Description A remote code execution flaw exists in the Docker API deployment. The '/crawl' endpoint accepts a hooks parameter containing Python code that is processed using the exec() function. Because the import builtin was included in the allowed builtins, unauthenticated remote attackers can import arbitrary modules and execute system commands. This can lead to full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.

Recommendations Upgrade to version 0.8.0. Disable the Docker API. Block the '/crawl' endpoint at the network level. Add authentication to the API. Set the CRAWL4AI HOOKS ENABLED variable to false to disable hooks by default.