CVE-2026-91941

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.9.3

Description An uncontrolled resource consumption issue exists in the PDFContentScrapingStrategy that allows untrusted clients to cause a denial of service. Attackers can trigger this by selecting the PDF scraping strategy in POST requests to download large remote PDFs without size or page limits, which exhausts disk space, CPU, and bandwidth on shared workers.

Recommendations Update to version 0.9.3 or later. As a temporary mitigation, restrict the use of the PDFContentScrapingStrategy in POST requests.